output2[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

output2.dll
Size

32KB
MD5

abe3471d1077652b90ded65a139ca1cf
SHA1

dd89dbbdf755cdc501b0232b0ef47bac52932ec7
SHA256

5cb31001023840cba05f179625108750d31ced8a241dc7fcb0c3fb570417051b
SHA512

a3c5a5774e60b1396318002a4a2e5de8efb1f0ecd12a10b8d395e93ae5e5748ad15753254083c796064ad0277aadc11796d8ddc2b47be0836b50e957fbcd1817
SSDEEP

768:CPT0YVfM8VaAyD1mhJzF2HawrrFbe4fzr:Cr0yE9ALXWawfFi4b

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
output2.dll

Files

output2.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\Users\CODE\source\repos\R2\R2\obj\Debug\R2.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 836B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ