Models[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Models.dll
Size

1.1MB
MD5

381209a8888ce150937d218fb84b7a18
SHA1

94435cc1652870afbeaa4d49ce3076aa1f5b149e
SHA256

fd61ec7619d507c335f2cdbe5eea1d205920239193ac2e9c62098ffafeb762fc
SHA512

84117dae43b370a9672134e0e0e35f629b83ec865b3e6f7a33454b4e8f6892bd60cb707532d76fe76c366b3834365b98810dde0cfef74f8de9b50c38a2b6943a
SSDEEP

24576:kxRQQpsUwpaQjwkWm9eaZfDrtEM9OlBSWMn45:konKNM45

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Models.dll

Files

Models.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\Backend Visualstudio\GM_Tracking_Web\Models\obj\Release\Models.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 872B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ