Autofac[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Autofac.dll
Size

213KB
MD5

673da16c0bf349158cd245430010ccd7
SHA1

3a48bc9c5ef3191e2ea1b2031aa46d4d7facec5b
SHA256

d40e5c7294ee3970f89c71ac5703842f9684ac41cef759e487928508ee967f56
SHA512

2fd4c0d35c8a2a0846d46c41fb43659c827d25fd2625a06ce4159d7844706af7cd6fbb6153740752fba5aa6870f07bb20dd7ed4c7b923fc45973c862e5e64451
SSDEEP

3072:UP1IZQeFJx02M7RVAvChFIkebyzdbUZhj53NTpUR6gLOk:U9uFe22VVhFIk31UZzdTpUR6gS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Autofac.dll

Files

Autofac.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\projects\autofac\src\Autofac\obj\Release\net45\Autofac.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 211KB - Virtual size: 210KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 996B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ