NCMS_memload[.]dll | Triage

Resubmissions

22/04/2024, 16:57

240422-vgdw9sdg5y 3

22/04/2024, 16:54

240422-vek8kadf34 3

22/04/2024, 16:51

240422-vcsjvsdg2s 3

Sharing

General

Target

NCMS_memload.dll
Size

23.4MB
MD5

9098ec485ea7f34cb0e170f9c1cc932a
SHA1

6a1c275e011cd3ef0bfb756dc32da6d81909efb2
SHA256

1498a5041cbe059c49623f8da56c4f5e5f5717093508752d786aee3498a9d797
SHA512

e2bbffdef9dabbf3b305b292d7dedebdb5975b0fdb4b83164f02073ab54a3d3edd62a381125ba3f285cf740c1d7da5954d1d9a0a1e666576031dbb3b8a0a4d94
SSDEEP

196608:cTc0NGq4XsY07U+HaWEN2qmzqBCmyO6bi5X03cjv:OUVpBe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NCMS_memload.dll

Files

NCMS_memload.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

X:\visual studio projects\NCMS\NCMS\obj\Debug\NCMS_memload.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 23.4MB - Virtual size: 23.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 880B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ