Utilla[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Utilla.dll
Size

30KB
MD5

6bd7ddba43cabcdf70beb3434015fea3
SHA1

beaf85c0340fe23e13f9ec91afb1d8774a275bd6
SHA256

a904cb192771160f41c01163e2594278e5e2929bd3ef36687739ee61b9402e9b
SHA512

7f92bbfe1b134c38a9381b7e77928f13677f9fcf945e74f7913f8566cffafbede9bc2e00073935e868decce3869fbc1897d3d2c885de237dd79b96aba11f4853
SSDEEP

768:0VrFYpR/aTO01gd8PQ3rBdrXm8VLujOlIQv+:cxYryiGgyQLrXFVL/lIQW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Utilla.dll

Files

Utilla.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\a\Utilla\Utilla\Utilla\obj\Release\netstandard2.1\Utilla.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 860B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ