Urovo[.]Service[.]Business[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Urovo.Service.Business.dll
Size

20KB
MD5

270435f4c595ab798af6d185bac5ffb7
SHA1

3419cd4ba769b5cd0026cb7fe72cc9f4660d619c
SHA256

ebc4a3366134993036a846636d1c69f974ed7c0459f4799fc9c411d3d087dea7
SHA512

5ae6aa08d489ebd93440757145d945538b3c843814f3c880b7e3cf93438bd3cb89299728b7b2e4a9226bf757fbb96abf8979ccc64868209371b62b561285c4cd
SSDEEP

384:gpx1oI0Vk7bkS+FZqyP5gFJECZxrGW/cp3qSqVam8YvJ3xlLd61Wm:U110yXkS+FZqyC6CnJc5zm84xlLQT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Urovo.Service.Business.dll

Files

Urovo.Service.Business.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

e:\software\workspace\visualstudio\PDAService\Urovo.Service.Business\obj\Release\Urovo.Service.Business.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 984B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ