file[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

file.dll
Size

211KB
MD5

7cbb7fb6dff312510b5ca694c3fabf3e
SHA1

aadc2410971e210a126137bba5f1611e469a25be
SHA256

2eb36af1f00188e6b1060d1e4de529eb9c8169e37b5817e40bb3208674a1122d
SHA512

41638f25fdaf50a5e20ea5128397b12b5d09a9c4af29b52aa706002e2d59a20fcda1f25de7cea9a4844fb5a2814d1e81b9904f800a2a25172eb8ecc15dc16845
SSDEEP

6144:qO2yzQ9Mrk5VVBn4LudVX+Y0926Jx38Y2:KyzRkb3dVXHPWx38Y2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
file.dll

Files

file.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\Users\WINDOWS-LABS\source\repos\mathdematics\mathdematics\obj\Debug\hatthgola.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.gN~
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.(Yr
Size: 208KB - Virtual size: 207KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 904B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ