FileChangeNotifier[.]dll | Triage

Sharing

General

Target

FileChangeNotifier.dll
Size

9KB
MD5

4baa9014be1d20ad6db3aac22508fda9
SHA1

7f070571a2df5d9d65ad7f5259112e143370aeb8
SHA256

68cbe5a6d200ed13abb5acd2884c291b775001f776babc7b530c6f11acbba1da
SHA512

3803fcd4638cbf145faf046650dc4d3b888336e1876ea1a5dffa5c9c80d68c30ff4066e6fe33c9389d0bc311ee98573dcaf9db83abbc0c92fafe02c17613f664
SSDEEP

96:ysMFXrgj5/rfL5MEPn6b+Iu+06iiJx3WNtaYc0Pk4OjlNSr0Pk1YHAd4sLYWOa:yvtM1L5MEonEe84Ycek3ur0M1Y4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
FileChangeNotifier.dll

Files

FileChangeNotifier.dll
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.mvid
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ