LogonUIDefender[.]dll | Triage

Sharing

General

Target

LogonUIDefender.dll
Size

196KB
MD5

47d104b220734271e9aa81065eaa0cc8
SHA1

0af41a74bcfef92899f2b6a6b370f31d6e22f82d
SHA256

88d81109a51e97c20fb10092a510c9055df0bbeb9fe86f5d42dbd229ccc3c6e0
SHA512

5643b6981d0054a3b8d69616a78c5885bc8578029fde626d61c53c14bdfb2598dcf0f157c9cf895081dd81f3a3d70c908d44f788a5c9c22be7ca4a0b270eb409
SSDEEP

6144:EbL0dyCIzMEZ4DQ0SsG4fdyCIzMEZ4DQ0SsG4U:IHlzMKw0lzMKwI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
LogonUIDefender.dll

Files

LogonUIDefender.dll
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 103KB - Virtual size: 103KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 91KB - Virtual size: 91KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ