LoreSoft[.]MathExpressions[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

LoreSoft.MathExpressions.dll
Size

30KB
MD5

198be508ebe026fc3f170db66b585424
SHA1

3d6e34b07a46778bec2477770d1542f105622413
SHA256

945bdb3e6b505a1a63150495e6c3c14dc71a60408bb5ea3e54ed161bebcd604a
SHA512

b76cfdb87d67cb6d0f10cc0db01452140c99f7d841f36407023f66ecd61d96f49cae4b521f738e0d93ac8c7f800f0166f5485696749fc26f3473e7b0b234c6b8
SSDEEP

384:4MbjmeyIMtCVVFRJqBlAkc72kjh/05ZM5mPq4SWsW4w7tmtGiejFscZ1s5Wzy9z+:4M20VEfAkK65Z5ljLgijHAQNjoc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
LoreSoft.MathExpressions.dll

Files

LoreSoft.MathExpressions.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\Users\joe\Documents\Visual Studio 2010\Projects [git]\HomePad\Libraries\LoreSoft.MathExpressions\obj\Debug\LoreSoft.MathExpressions.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ