TextEditor[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

TextEditor.dll
Size

214KB
MD5

efefcce9bfce16c7323ad8e0a7a5818d
SHA1

884e85bd6333ee5d69ab73367419323e69e7cdcb
SHA256

d19af21622109a731ab96400492858f21c0951aa64f7774a8fab3c6053476d9b
SHA512

caf2c22aad0b142db88260277385a40a6c65229530a2cba58849376144560b99ea196d5fb256d43bda76f389fb9029afa6ba21c772ed3a97aab204380337f816
SSDEEP

6144:c8Ky0nR1kDDB5HH4JrloLwPupm90FSR3BAs9v:c8Ky0gD7HHRAupmDRv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
TextEditor.dll

Files

TextEditor.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

H:\DotNet20181206X\ERP7.NET\Hanson.Product.Erp7\OA\TextEditor\obj\Release\TextEditor.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 212KB - Virtual size: 212KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 952B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ