ReformerOcean[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ReformerOcean.dll
Size

61KB
MD5

674424e8aaf7b9d3bf006d40a9282c8d
SHA1

b6c87ea365d9d74c2b670a5ea42aea7ac08adbed
SHA256

bf9e3945228ee64c62da425ff6296c48292ccaa1e84bcb728ca290d4df26ca68
SHA512

9b40defa2c81418e8bc619ecaf49be859cf3c7320666d0f45b0da2dcbd4b5c27080f32a2af0678b95e36e26fdce6b2f740631ef66db7ea57e2a21a292801ab6d
SSDEEP

1536:HEVOxg70SY0ESANapUN1TtyG3FGsMs9+N:HEVOxgfESAN0C7bYN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ReformerOcean.dll

Files

ReformerOcean.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\jenkins01\workspace\ACS_PublicProject\ReformerOcean\branch\V1.0.1\ReformerOcean\obj\Debug\ReformerOcean.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 59KB - Virtual size: 59KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 976B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ