download[.]dll | Triage

Sharing

General

Target

download.dll
Size

13KB
MD5

a42e3ce8e32cfdbde610d1b3ba90abf5
SHA1

b6d277562cfe4e34173dd86c4ff319e4741ef6dc
SHA256

ebff02981af27ab39836df3665ce0b3ad50ae9f11a04d890a2fe2216115001f1
SHA512

39465d8e7b10eeeacece61fcabd0fb8f04a26e769da8b33c4500477bcbdeaa03e7f6764f9fd7d167f737f5554c2abbc1875c0b064a3527d16f542d2407cdb372
SSDEEP

384:9nlkLUkrgf1k5+bNZzufchrMInds6HkkSybHpy:9lkLUggf1k5YzLhrMI6VkSEHpy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
download.dll

Files

download.dll
.dll windows:4 windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 920B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ