HL[.]SystemMaintenance[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

HL.SystemMaintenance.dll
Size

132KB
MD5

6c096ed3dfae6c1c80fdda7debdc7b4a
SHA1

b8b514f7dd5f6b7c32cd8ee6f284ae088003f1e1
SHA256

44fec6506223e8f0301aedcaeaa91a68b2adc05b3fedf2970be5d48fb6d91d58
SHA512

fdff4dbe4411d055a3504084a9210b83a9e9e1bb3a6259bec842ce214ef0d713052e339a00c47303f66390135db9af485fbb4f3a0e2f9143c0add7ef05707d11
SSDEEP

3072:3YT678e/+ZGtq5DoafSbXnOUxN/+q/IhjIjyCM:B75/CxUxN/+qAhEjyC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
HL.SystemMaintenance.dll

Files

HL.SystemMaintenance.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\C#代码\A_DongAoHuiNew002\Client\PC\HL.SystemMaintenance\obj\Debug\HL.SystemMaintenance.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 130KB - Virtual size: 130KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 984B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ