EmailServer[.]DATA[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

EmailServer.DATA.dll
Size

84KB
MD5

afae3a3713acd2bac9f7a8d3158a8b95
SHA1

c12033624a5e44c2c1b16cfff689e26d88d346ab
SHA256

267f6d23a05c54abecb12c645efbefe4cd30b144e727a9988fb3f4c7190f1bb8
SHA512

0e82bb2726a8b76651a056ee2ae12c60590a432138bb8eed2564f15bbed9564908e19a7ecded20614f85c864d4b765b6579d7d054be1f623133f0bd0013ea40e
SSDEEP

1536:avaa+QsvB7F/EgQCZVNss0FGL0pipEBz:ai5JZ7l3GwKz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
EmailServer.DATA.dll

Files

EmailServer.DATA.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\Github\EmailServer\EmailServer.DATA\obj\Release\net7.0\EmailServer.DATA.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 82KB - Virtual size: 82KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 876B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ