accoreconsoledll[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

accoreconsoledll.dll
Size

2.7MB
MD5

75c14dfc19763fa6008e10c6d88a73b6
SHA1

aec8c17021156abc05a4b32ed7d3dfef721c3a10
SHA256

e0e01247e7c53f2b5f1ce6fc73737533a0bd4f273f2af4c9dfdf27a3d04b0529
SHA512

80ccb179d04f7cd83605f910acba3de8feeddee27b6a3e993ca8a97cce3edc5a94c8f08dcf3cb4aebce8a64a9882b7a14f263ec7a8384bb97cc1b195689201a8
SSDEEP

49152:cmaUXEQWx9TOmrOBJU7kFHmxOTc2Y2xQHGXRjFUNkKO2tm/78ch3p:CUXE7Omr3kVQ9GXdFUqKO28/l

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
accoreconsoledll.dll

Files

accoreconsoledll.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 2.5MB - Virtual size: 2.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.vdata0
Size: 41KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.virbox
Size: 141KB - Virtual size: 140KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.vdata1
Size: 512B - Virtual size: 48B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 952B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ