UAP-CORE[.]dll | Triage

Sharing

General

Target

UAP-CORE.dll
Size

298KB
MD5

e740ff54fa588f77f0e30e245b9a98e2
SHA1

15176f1b2883d9f13b26d69159dd9035a7ed0e02
SHA256

5f293b905587ebd73c7375f0bfc6b79b8c89f5ab7b98fb9c4964acbb154661fa
SHA512

cd56612cdc4636a58ce806f00130a75981a3d770e0596e590471da3bdfbe04011bdb0b6890cc495ecbfd5e6b36defc5690f89c40680a83063b9dd10b739e7ee3
SSDEEP

3072:Yt/2Cnh4MPLI5vogAv9xW96eIGrXugBt0VzDZgLc42RG+b6VY1lmGUtiEZoYsiqi:YtXnJuD2vZ2VBt0VzCcneT5W

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
UAP-CORE.dll

Files

UAP-CORE.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 296KB - Virtual size: 295KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 992B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ