Assembly-CSharp[.]dll | Triage

Sharing

General

Target

Assembly-CSharp.dll
Size

1.3MB
MD5

18c5f9c860e9085c3a99a17ed06358da
SHA1

b9503df369eb6214084ecfbf855b9a3e8b720441
SHA256

90f673a4f9a0c04ba4eee3b595f9edae56e27ae023bceccad78cdbd31a86a30a
SHA512

0227f87db8986bc9fd239cab27f7f649798a2ac5d73422d34e42ebe8e7a6f7cc3ddb79a5b6bbe5b26c448a5f0713523d9a91aff615a7fbcd8c12b03db13f342c
SSDEEP

12288:g4WUSpTvpzt0XQg09DdVqKaRfizL6g50i47cxQpZczXF99e0TivMU6E5Xl:tkv0Xy/1PfKz7fcZ99ek6MU6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Assembly-CSharp.dll

Files

Assembly-CSharp.dll
.dll windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 700B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ