LostClient[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

LostClient.dll
Size

200KB
MD5

84fa3cb8e5b6a2d9f1d580f6ce75a788
SHA1

fc47051024b3d0f994305496d6cd2f977da40cd8
SHA256

3e9af00b6a70055c7bc59887ddd9d4d193e29435c5e505212cad8f38e9917709
SHA512

852cb72daaad51b388b2424a7b6b48a608b8bca128416b4ea85f2a4017dc801b058fe03db77c6eb674bec0bd715e5079c8fee150f70408395d3726f2415ceb70
SSDEEP

3072:sQBy33qccBw9kotoiMf8K9MEPiHEnGCDEh43iOAUo02:sQBy33xcW9kotoiMfHSEPi+bEhwi9UD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
LostClient.dll

Files

LostClient.dll
.dll windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 198KB - Virtual size: 197KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 852B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ