FAmateHostDriverSecsTcpIp[.]v4[.]6[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

FAmateHostDriverSecsTcpIp.v4.6.dll
Size

51KB
MD5

70011bbd32bad9968db7f6affc7cd9bc
SHA1

f92a32b40cf7ff606e281468419757f4dedad62e
SHA256

8f1beeb3933b12299f75ec7e3529ade9677f573752e8d344c4bf7406291b5ceb
SHA512

f662b5233c826f2a74c83613fe8734c29616acb8c6f2686715c6d19550a3b1d66c907e675a8a96ae8b549fd54f7a0dbe3207c360b75553c10b38f5766656ad37
SSDEEP

768:ns0q6aqqScgaEwO3YE7AHjZZOmaYPfZErpY/kw4ceCIUS6I/qtF9dYOXwP9OVFIv:ElHkc9Zc9tz1fVihe0e

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
FAmateHostDriverSecsTcpIp.v4.6.dll

Files

FAmateHostDriverSecsTcpIp.v4.6.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\Working\nexplant.mc.opcdataclient_S\nexplant.mc-secs\Nexplant.MC.HostDriver.SECS.TcpIp\obj\Release\FAmateHostDriverSecsTcpIp.v4.6.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 49KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ