WebAPI[.]dll | Triage

Sharing

General

Target

WebAPI.dll
Size

29KB
MD5

d46deb5694fc46064d01b2fe124b7781
SHA1

65cef37104ff7a04340a903374f7e9af3efe1f91
SHA256

fff20947c815c6045e8bf0c86dfb6778b7d529458751371259ae361a492402ab
SHA512

acc3c4683fb556974579590ec643d55750f42c75fdd7b9d5d9676c1b14de223e0bac2c8d3a5133206b42a26790a89b486d3a374d573c2f0126eef9f02fd49ff0
SSDEEP

384:HH0jxM/3H1YFJ+dty0TQJpqsd/a5XW6fGfhEdxiAAoKTZxPyRit3BlT:HHjeY4qsAWvhE7A59x6Ri9zT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
WebAPI.dll

Files

WebAPI.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

E:\Git\psi_kis_webapi\WebAPI\obj\Debug\WebAPI.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 872B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ