Includes[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Includes.dll
Size

4KB
MD5

700e980966ccc5c77fa380ae62e32722
SHA1

230dfc5a91c4cb1dc4535fa571dad2bc35d26342
SHA256

8b175430437edf16e2900f179898008e234db54ccdcbf47a959bb2240715d050
SHA512

be76076ae3290cd80b3571f4e5b2fec87996867492b17bcd087807b8d328bc396cd9ced9b89ad8b3eaba06bf8b4bffe6cfdf6bef225485cf0c4692b93e9ef0db
SSDEEP

48:6WRIth7aVVjr2au25sWuJPisWiTigMprDHl83dmzF:bqwV6pWyl8q

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Includes.dll

Files

Includes.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\Users\Héctor\Documents\Visual Studio 2013\Projects\Includes\Includes\obj\Release\Includes.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 776B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ