LdMatrWinForm[.]dll | Triage

Sharing

General

Target

LdMatrWinForm.dll
Size

1.9MB
MD5

65fce3e506d3791ac4d24f7c365b413e
SHA1

da2f49598a1c7a3dd59517ee16a732bd0015e26f
SHA256

43f55599b3d8d68fdf6a0bf33401369a7fdb0d811f55810658cf26146e0cc187
SHA512

711490e451dae527b485cf3d2092915fac59dbfa01bd6419ecded592c8df7d0c26464d3c16ff5b8c9d9200658b26be78050130179f6b38c9f90086220e2c2841
SSDEEP

6144:8iQ94P1SnMJ45z6zVQEb3DuXs4/ExLYgTkwY4rDS5VuKcR9a4oD:vphWYq6TkwY4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
LdMatrWinForm.dll

Files

LdMatrWinForm.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

F:\Ldsoftware\LdMES-HZ\LdMES\LdMatr\LdMatrWinForm\obj\Debug\LdMatrWinForm.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 1.9MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 696B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ