BetterUtilla[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

BetterUtilla.dll
Size

29KB
MD5

7942621adeb55177d68da079039e6f52
SHA1

091320254725aa13075a3c2c6c864d4987995b0c
SHA256

29015f34bdd28f2bb2aee4f06fbad2074d2942c72e76235c8fdf85c403d28744
SHA512

8d0fa11784b6de9a83115504b0f6cc34eccf00d4738c900a1a8cad521aa2c9540864d790e18611f0208489db777f6865d8ae68e182a6d734f4acbfa21fc1ec3b
SSDEEP

768:QLvqtkpuXKzmpiTq4cWFIU9mI9a84bVebb:OICNaARFj9p0bVeX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
BetterUtilla.dll

Files

BetterUtilla.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 832B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ