UP[.]Data[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

UP.Data.dll
Size

44KB
MD5

c3abd3395bfb0a2a91ba54a81e467f0f
SHA1

10729ce65fa707e8bdec07145cf5967a0c72131e
SHA256

10d9aad7774052d579d8b9bae2c67766dbf7e70d246384e0946427eb25bbc4dc
SHA512

900a2bf65618ea9ac85392daaa697048ddc44c0667a1e811be4e40ee4c7756a1968419d5f3e60af0630f968c47e806e73b36033673d0a28301ec74fe1913179e
SSDEEP

384:O5+nnoDFfg5em3oRZvLCDuq+onnazwpB/15Ikc9Bm0NIkDkhDrbHq2jhNk4atYyB:s/RC7KjCDuunazuyr9BUDrbHq2MB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
UP.Data.dll

Files

UP.Data.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

E:\Cread\UP\BaseFrame\UP.Data\obj\Debug\UP.Data.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 32KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 720B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ