QQBuySdk[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

QQBuySdk.dll
Size

43KB
MD5

f3973098d098f66eabe7ed64c9a6d512
SHA1

d9e134f9134ae86aad05739a40cc2e76d7022095
SHA256

5c90f964d943181d7422bb90fd68f9dcc9feaa1801ebf094c929dd090a6f6e64
SHA512

7a1b0707f04f15906b0925b0020b323e664156896c9f25fe0533edef69a6df7b8995b3188138b4ed3742e469b9627e2a1d6218dee076e15a25d9b180976ea936
SSDEEP

768:krX5YKEnDAy/Hh6ctn1cy0BQ4WzAcTLvTiI6vEkkjBb+Oii2:kr57K86hLnbwQvzAcnTU6jBrA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
QQBuySdk.dll

Files

QQBuySdk.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

H:\DotNet\MallSDK\QQBuySdk\obj\Release\QQBuySDK.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 41KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 848B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ