Application[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Application.dll
Size

106KB
MD5

eb36b93bf6cf4d41419de4ac2825eb07
SHA1

24f8324177ea4ff452ac4a4df124e77da2c31f0f
SHA256

e38b11e3d2d93f5b9cb86b136ba6275175a07af5a6f521e1f6735da6658d7d9a
SHA512

bb252e2e2e2d88c3e3a348dd9184018695128ce35f842b28e6e393783a42a08b008bf026332210e8f68ea79322cb3745a47bd820f4ff2643f3fb478b686d6044
SSDEEP

1536:UZbHYrSqXWMRf8X5Hx0cFdz7Ow7zD3otKcijZf8Mk2VOMEH2tFQ92t:8HYPXE7VB9N8MrEWtFQ9q

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Application.dll

Files

Application.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\Projetos\purecloud\extrator\mutant-interaction-extractor\Application\obj\Release\net6.0\Application.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 104KB - Virtual size: 104KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 900B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ