Umbraco[.]Web[.]BackOffice[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Umbraco.Web.BackOffice.dll
Size

844KB
MD5

eb91a450bb558d28b7459ab90344c723
SHA1

29f38f4f1e61aa09a6d50ffbca3cd0898b64a035
SHA256

e6be58e945b3bab06f5792b371d178d147027b0d0aa1ce4d98359504ea3acf84
SHA512

2935fc05b9e1cd26141262ebceb3070a20fcfc6cb62dc26460b56129912afa8c6c435821f6f54052b4315b07e143ebb602da3136dd694b96585d5031a4a04c13
SSDEEP

12288:N04TsO64i7dFvQN4Y7ZyhFSPg+vhqtHuP1skcJJGb4L3M:Y7HA7ghFOvhcHu9spGb4L3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Umbraco.Web.BackOffice.dll

Files

Umbraco.Web.BackOffice.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

/_/src/Umbraco.Web.BackOffice/obj/Release/net6.0/Umbraco.Web.BackOffice.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 841KB - Virtual size: 841KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ