CommandLine[.]dll[.]3 | Triage

Sharing

General

Target

CommandLine.dll.3
Size

200KB
MD5

36fcf5026ec3fdf1f3bc5e7d4a924960
SHA1

2d8a3d1d9ad463c2da3a1c7e017b44b9edb698cf
SHA256

ef4db32569b8c701d58e6b2e69210a23b22823d295de45c463beae16abecbda8
SHA512

ba7e2db9e8bc048ada44489c2442bf98c730bd666ce8bddea65d1b3a85488f95bb0dc9424621007f43ff9c6e5c10779970415aaaae22c012379d13c7fc66db72
SSDEEP

3072:nGhXtCTHuV1UaXUsJ6wENyLeEme52EIFLfG8MwpR+dq:nYCTOV1UaXUsJ6wVS/PLepu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
CommandLine.dll.3

Files

CommandLine.dll.3
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\projects\commandline\src\CommandLine\obj\Release\netstandard2.0\CommandLine.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 197KB - Virtual size: 197KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ