Interop[.]ActiveDs[.]dll | Triage

Sharing

General

Target

Interop.ActiveDs.dll
Size

104KB
MD5

4cbc7d331fe4af2216b49b3add27c2f4
SHA1

f298d56695dc41556266a8ee5bc0ae3210220a01
SHA256

094402cfbad1245088aba96927608eb7baa5cf344e225e945fe22d9fc170e49f
SHA512

2448c6fbee6925ab72233e187cf57d138b085bda8a7a9155dc181ab8d87b8ade76a5d5b2caa87950385d4a62f1acde04bec544e17755b5239302be042459cec0
SSDEEP

1536:FhPlugO/BeaIJM1GMLNOpFb1z2uyCJtYOca/zvn67GgeX0whvfb:zluvNS6cpFb1yDOcgLgGgeXFh7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Interop.ActiveDs.dll

Files

Interop.ActiveDs.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 92KB - Virtual size: 91KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 832B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ