ModelDevice[.]dll | Triage

Sharing

General

Target

ModelDevice.dll
Size

47KB
MD5

c4ef69c65b96e8fdd626b861a656982c
SHA1

a588b0a927b8542b47c8b9fcd163e6d8267c7e5d
SHA256

9dcf5edcf5e74844539d876ac0c80d7b9dd73a3ed906112d715fc31e375647d6
SHA512

b882af6133ae07ae84b7a0ff0331c8e86d72ca695cdb0aec3540f926dba7176b946b9ad44e186cdcd3d71cd28093ef4689319209059f115790b7cb91249bc3df
SSDEEP

768:IR7pynmEX4u8+osUORnkplUoeE5E7OgGCjaPjoIcLF9S1NYfDVmHV1QvvZl1SFr4:87pyn5UBxrbcx9k+fDV4V1yv7xb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ModelDevice.dll

Files

ModelDevice.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\CHARLY CIFUENTES\ClientMobileTracing\ModelDevice\obj\Debug\ModelDevice.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 45KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 840B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ