msfix[.]dll | Triage

Sharing

General

Target

msfix.dll
Size

150.7MB
MD5

007732ebb67bdaf28a28c146a4c1b058
SHA1

f18449199015744123bfb12d469b3aebaa6d1e7d
SHA256

5463006bac708ec4d0f49d5a179ef120c073f8c21bea1061f8b6e82b854b9a6f
SHA512

6806156035809eaaa1d7c4e7d6c1b4ba824adf9e97f527bf98a98971be5fa3a6e9033f284471c314d524f8fedafeb0eb933f7bde72c0aa3ff961b4ff7ce3c2ed
SSDEEP

12288:kaChUxPhhY5DwR/Z2mH/99B9Mwqr/YajmfOUkE8sB/bB6sijHlBiJ7d1uYPOD:kRQ8SovWPo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
msfix.dll

Files

msfix.dll
.dll windows:4 windows x64 arch:x64

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 716KB - Virtual size: 715KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 728B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ