WeiKen[.]DataGps[.]dll | Triage

Sharing

General

Target

WeiKen.DataGps.dll
Size

27KB
MD5

ff7021a16e5abda62e3108377f964227
SHA1

dcfc8e554f36857ab735680b2544bb425cf6a139
SHA256

d5481d353baa7b56a6a9e4a54ae9864d6c453ea27bb79af5dce19c035afe9077
SHA512

5ce33d23b6b29bbd90837c00272b2531fe66087d53929f5dfeec4b12d9f9c30a3b8ac4d581049eec94ef64ba78bb6794d4940a3e376a745b4d28e79252f87ea4
SSDEEP

384:uLiZY6XyOvq9eTXozQonYkqEh5V6RL2kOu+TwCuuz6OPGtK7m0mF:uLibT4zQonYkPhL6ReTwCuuz6GGP0u

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
WeiKen.DataGps.dll

Files

WeiKen.DataGps.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

e:\code\WeiKen.Map4GPS\WeiKen.Map4GPS\WeiKen.DataGps\obj\Debug\WeiKen.DataGps.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 888B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ