MRR[.]Core[.]dll | Triage

Sharing

General

Target

MRR.Core.dll
Size

23KB
MD5

60e75abac3e35fb5a271a5aa777d7abf
SHA1

fd188614a800c48dcd768c63eda4bc1e6ae043f3
SHA256

d8f5c35ff216b3579c3dfb8f1e4bf782e621d4ed3fef28c8a6b19138531c492c
SHA512

abc9c5023b9a9c17f71fc9fe4b34e9cb8164fbae7b2d5b740469d1ada624fafac9142b3b823043e23bec247f479068dcc6e4b053484cddac5b8683a6b099c594
SSDEEP

384:ZmFEyZkSgBel9L9EA5G6f+gWLKz12tQAjnUYqaBtKAvNAdRnfVYFUdZ8W6TmxnX0:OE8EBeek+gWLHC6UWtKaNAnfVt8+V/VM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
MRR.Core.dll

Files

MRR.Core.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

/home/ubuntu/marcapi/MarcSimilarityAPI/MRR.Core/obj/Release/net6.0/MRR.Core.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 796B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ