POPUI[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

POPUI.dll
Size

75KB
MD5

508a436832786a884fb94bb1d55e2a71
SHA1

b55595ff12e688a0a9bcc4ddfd50b2b114ab07aa
SHA256

6d01a03a3c92ee2f275800b03929b3f58e28825b3c82a3dbe9124bb52e4b3d49
SHA512

e19d1907825968c953a93306e80e60af3cd6d151abda19a1d74646de5b4bd722e84462b5cb10d7331f909c120370f77590e1952ce0302841b52d5d36d796c4a8
SSDEEP

1536:ee4x8xf4w0e6Ey8hCJH5XTCif+7n4pd1Br:eeTf4w05h1/lf+74pd19

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
POPUI.dll

Files

POPUI.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\ProjectList\MES_Innotool\source\Custom_MES\FrontEnd\POPUI\obj\Debug\POPUI.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 73KB - Virtual size: 73KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 856B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ