SecuriteInfo[.]com[.]W32[.]ABRisk[.]PHDM-1697[.]32602[.]3126[.]dll | Triage

Sharing

General

Target

SecuriteInfo.com.W32.ABRisk.PHDM-1697.32602.3126.dll
Size

63KB
MD5

2ed4b311420b27fd35abb943558b7165
SHA1

854c2044c2c808eabdb25b4a40794906b32ecea5
SHA256

8fb2900936ea5b26a4444cd2667932e0566fd7ad3af093850d5be28becbf77dc
SHA512

3bd95dc7ca772e93fb4ce34d1422a1e7f07328a45412b564363a3ef47d1907014c2e0bc04f1d5ad6bc350bef5738ffe30a317e203db61fe8ab635f392cc4d4e6
SSDEEP

768:JrvJNllHeNxxqp5lhZ5M3i5YkziJAGVHAJllaH6HBHbJnw2JfleYkcHAHdH+HkHY:FJDMSr2JYJtJ3JGnLf49xtEmPK+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SecuriteInfo.com.W32.ABRisk.PHDM-1697.32602.3126.dll

Files

SecuriteInfo.com.W32.ABRisk.PHDM-1697.32602.3126.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 61KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 812B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ