CookieBase[.]dll | Triage

Sharing

General

Target

CookieBase.dll
Size

415KB
MD5

850e2e67c815b4da767dfc9c88a2c24d
SHA1

c422f3bc50f6086673a960f88b8545c3eeb2b9d8
SHA256

8f78fb7fbcb9bea23f183c2f10c90933ce4bf803c24d3304f9a04834b1ab6df5
SHA512

011eb8230e57dd92d43dd0a6d002853e097a99152b7a289301f59b569f7e1209f3dd4a83021ca3f10346d148cac38a5e50f4cb62ab68635cec85397e8d730a82
SSDEEP

12288:6PoR1GytQQu0bnCPhghKdueXr2Xt+p69LNA:6PoGyO22JqeXrSt+p69L

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
CookieBase.dll

Files

CookieBase.dll
.dll windows:4 windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 407KB - Virtual size: 407KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 904B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ