LdWinForm[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

LdWinForm.dll
Size

2.2MB
MD5

95a0d813bd9390cf3d4148224afd8505
SHA1

0fa73b73bba963f68e1bd2137a35eb6026422e4b
SHA256

151c0de4a59b68c0515277f1ac59790ae8dc1fd52149d1b13e802f81831ce9ff
SHA512

3650e3ab45cfb2819e6ebd4c43fe1b51d21c77dedf29c8c4fbe3cdfbc55dd514d11144062a472888806310c3ae88b9661d7491dda30d8cfd0bb3d473de3cd5d4
SSDEEP

49152:oc4Vh8csvRhlYqNJqkQhN9mUaynjcSDr/:w7svvOqNJQloSz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
LdWinForm.dll

Files

LdWinForm.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

F:\Ldsoftware\LdMES-HZ\LdMES\LdWinForm\obj\Debug\LdWinForm.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 2.2MB - Virtual size: 2.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 888B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ