XYMES[.]Service[.]dll | Triage

Sharing

General

Target

XYMES.Service.dll
Size

4.1MB
MD5

4e7ad0138b689777a8575b4c20684b0f
SHA1

c330a414f2385258bdf075c3efb26d6df8d97c16
SHA256

d633a585b8b4c8cb5798613b2c5e0ecf95b4824e3ab26c8c04e803e330c591d3
SHA512

1c9aa0029b9c690832213d6ad19ebae5739dac5e1b6175523b210667df8d25ac7efc1612c5da540b6da960989a01b3f786baec510eee08e51a2580dca78cf8b7
SSDEEP

49152:5Wf6o8G15GhVr1d1/Qntl+bsk5yPeE3tkel:51hGwDPE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
XYMES.Service.dll

Files

XYMES.Service.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\Code\SVN\X9\XYMES\Service\obj\Debug\XYMES.Service.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 4.1MB - Virtual size: 4.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ