icmp[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

icmp.dll
Size

3KB
MD5

dbcb5922bc7cac9659ad14240902c4fc
SHA1

e83e9f52625aa10649236387a119392a8061a64d
SHA256

d4cc3c44bfe8de4073c5e2fe6be0f7dbc1e81aa89075626dfa860f9fed518a47
SHA512

a03859bf4e66b0bb0d206a37c6688a2a2c0670d26467c2d5989e14499b043fd7db350c7b99a9adf40595570a351a6d0cc70a28b4cc7eb74459010279d45ac589

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
icmp.dll

Files

icmp.dll
.dll windows:6 windows x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Exports

Exports

IcmpCloseHandle
IcmpCreateFile
IcmpParseReplies
IcmpSendEcho
IcmpSendEcho2
do_echo_rep
do_echo_req
register_icmp

Sections

.text
Size: 1024B - Virtual size: 548B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 984B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ