StarkbankEcdsa[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

StarkbankEcdsa.dll
Size

25KB
MD5

3c70655f01b5dd78c4f1a57d597f9640
SHA1

66a8b3af972d641fa438b1c09b802a558b877e7d
SHA256

890809c259dd9139fd2a4fc2059d1221e69044e109efe4894a5d9b36449d4266
SHA512

135edf42b0ddd146dea623d7095ee46f80d75fec30c7f9733e607d1c8619f4bba3c001a6b26bb859a69d552362857323666f7993669f35b9f79a2213412e923d
SSDEEP

384:TYIm/ID4TohYPispazA8zbVcdVnylFMkOexDlt3Mh9hrqbKP06EAK:8IXhBMazdCncMk1xlt3MSKP06EA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
StarkbankEcdsa.dll

Files

StarkbankEcdsa.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

/Users/caiodottori/Git/ecdsa/ecdsa-dotnet/EcdsaDotNet/EcdsaDotNet/obj/Release/netstandard2.1/StarkbankEcdsa.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ