Nlsdl[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Nlsdl.dll
Size

8KB
MD5

8d3f13ef1333c90167e04e6be4440247
SHA1

381ea99a674d680e5ed3816fa8c3d729abd6dff0
SHA256

3a8c057201b8a0f5a13b45b537b418640028df2590d3f3fd80efdc1ea03c2516
SHA512

f2af7069f106c3b07cba77e0fae5b9118b28dd71acdc6222d3570df86bdeb2d9bfab603a07f10280c08b6e55894fd14759c9697848c9e111988d344f7306ef2a
SSDEEP

192:L0KnjbjKWY36zwV2T5CNJY95NfdWgwWN1j:LHnjbOWC6zwV45uJY95DWgwWN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Nlsdl.dll

Files

Nlsdl.dll
.dll windows:10 windows x86 arch:x86

bff1681a4f936f685ebeae1a509245b3

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

Nlsdl.pdb

Imports

msvcrt

_except_handler4_common
_initterm
malloc
free
_amsg_exit
_XcptFilter

kernel32

GetProcAddress
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetTickCount
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
Sleep
SetLastError
GetLocaleInfoW
GetModuleHandleW
LocaleNameToLCID

Exports

Exports

DownlevelGetParentLocaleLCID
DownlevelGetParentLocaleName
DownlevelLCIDToLocaleName
DownlevelLocaleNameToLCID

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 848B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 668B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 324B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ