EPPlus[.]Core[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

EPPlus.Core.dll
Size

1.2MB
MD5

afe1ec72fa41856afcdb2070e87ea21b
SHA1

5449660edf083747e9868beb784b8292e2fe2f72
SHA256

75dbc8b8edea71c48e57bb46e3d3429501449b04b2010452648bdb6edfd01db6
SHA512

1bfbec197578cf95bed1cb6a0a83ed2d3a32dbc5a005007012c65451e7126866d82d3b7d5ba589b4a2bf0fa047d2d2c301962db034fb2a690534150d3a4bbea2
SSDEEP

12288:VQ9Txo1VAC4tLxjOnig2bhM+SnKlw2cUdHVUT2qN9Xbb75nhXwVF0cPUhCWxt0R:Axo1VAXpNhgIM+STQHVUT2qPn5nFwR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
EPPlus.Core.dll

Files

EPPlus.Core.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\Prog\1395\EPPlus.Core\src\EPPlus.Core\obj\release\netstandard2.0\EPPlus.Core.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1004B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ