VPL_Validation[.]dll | Triage

Sharing

General

Target

VPL_Validation.dll
Size

198KB
MD5

fdd4fe21f40c08f0207f99752c64e300
SHA1

70678c427fb94be5a5eb9dd128d4065e83bb5d69
SHA256

076b32c62b31bf9a6b03e3628b5c91e957face711116813c5000842167fca136
SHA512

1840aea82d584904fed9a1847283271443c08bbd90e953651be297b1b2751ac806df9ebd723e10a63a60728046f56e93c0280efb24b9e02d68155b19a26e67a0
SSDEEP

1536:EX/QkH+EJuKd+6kLV7OovSCPStgRGbwdyf2+gRTzHO77SlTaRA4BfSEMUfroB3gy:EX/QkH+qU1OonvRfM++gR/TaiUW1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
VPL_Validation.dll

Files

VPL_Validation.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\Backend Visualstudio\GM_Tracking_Web\VPL_Validation\obj\Debug\VPL_Validation.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 196KB - Virtual size: 195KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 936B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ