CAR[.]Plugin[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

CAR.Plugin.dll
Size

45KB
MD5

88027f65d58865e5d9f8bb7571e77f37
SHA1

17e947e7b5afb4618da205f8779217a80943548a
SHA256

9bcd853496a1e84bff4d9d239e414bc365f19920b598dce2aaa8e429aa6cb853
SHA512

6b98e970b6b81f1575742108e7f9a0ee00a9ceb4d929d6f497e7631828515286c6ee500fe03322b149d027d9d0e34393e98be8b4a0e9e129634d68b9f3b57631
SSDEEP

768:+bJks0ZfTKj9ogtejDS9A5OyjlOGQ7wVqr2GOjQTilb6XBKsMf:+bJks0ZOdevS9icr2GOM2d6QR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
CAR.Plugin.dll

Files

CAR.Plugin.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

E:\Architecture\CEG_CAR_DB\api.cheegu.com\CAR.API.Plugin\obj\Debug\CAR.Plugin.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 43KB - Virtual size: 42KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 920B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ