Hanson[.]Windows[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Hanson.Windows.dll
Size

5KB
MD5

de670f41cdbea2f37b30e347f90c60d1
SHA1

000c3efbacf5f14eb936745f8e927ebf135ece32
SHA256

474d1e6c8cebf34c045735b5ea83d7fc5e289dd1ce5032d13c1562c6ad3d71fd
SHA512

9e7930f1fe2588ba4afbba4b37c1adb9679ca782389c4fa8b1ec534492df6b0c8890dc09848a13130aa16b7e6d0d9448591e39118430f429b8197264d1d7ac00
SSDEEP

96:P6tQfccs8E19xjoNsy3Ecsi9cSql7YWXpgTg/XDd6labsZbMtYyu:PomiTNE+iiNYWXmkTdYabsZAOy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Hanson.Windows.dll

Files

Hanson.Windows.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

H:\DotNet\HansonFramework\Hanson.Windows\obj\Debug\Hanson.Windows.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 936B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ