ThoughtWorks[.]QRCode[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ThoughtWorks.QRCode.dll
Size

5.9MB
MD5

e99c9d87db4a9fccd8ea732422437bcc
SHA1

2ada88fd642a7ebe59042549380fc796df2959cd
SHA256

bd1aac1fcf706d01280f7f496544c521afa85958b50fed5dad72c1f317c6e1d7
SHA512

5be2d2cde92634679181f0083bb8232fec97b7bcc395a9ea12254290c06f83ba8d6a4d2a25a2d5dd33d20a3c41b4cdc6d2ba2c21177f8209002b69b8dbd5a02e
SSDEEP

49152:WgVURfSSgrm5q8+9+X658P1HHHz/6FVnwwjbgvVfv2vvrP4Jx3/9:Wn2+RwSzJt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ThoughtWorks.QRCode.dll

Files

ThoughtWorks.QRCode.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

I:\QRCode\QRCode\QRCodeLib\obj\Debug\ThoughtWorks.QRCode.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 5.9MB - Virtual size: 5.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 944B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ