DBUtility[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

DBUtility.dll
Size

1.2MB
MD5

a7c75bea9bc607a651acc163910dc662
SHA1

387fa0a1485715fcd5fb68692a9ddf745e92d702
SHA256

22317b6fa3849cb2111583c66e0ba1f85dee9d28753316a47d71597590bd9fdd
SHA512

e3058de61ca5eda176833f9165165ea465c4584c6f47621c8bcacecd4476b9c5c2e9a622f6c1ccfb8de68088fc6b7ad3dac080e5f2b4f69782f882a9c6b2398f
SSDEEP

6144:oISj16o3t3N1JH6skuqtTLC0SeZbEPl799GI2I/o8icN0z8gx97gm0B+/Zh0mueN:G1FJH6skuqtSKI2jTVBQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
DBUtility.dll

Files

DBUtility.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

E:\workdir\TCMIS\DBUtility\obj\Debug\DBUtility.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 888B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ