Commons[.]Forms[.]dll | Triage

Sharing

General

Target

Commons.Forms.dll
Size

304KB
MD5

68c4d998f44f872391348f868830a440
SHA1

ab0aff76bc196c316fc6b50c38103dad1e988022
SHA256

15ad38f400937872f2ff56376a768a49e9c551e0b4a3b48daecbe3bc4ba16956
SHA512

ee1a7eebaeafdd0bc45f2cfa5e283bf9db7fdc58d832f5e75c4a342aaea1ab9e267ad1c2178f7011627c8ead17f80a430b3088f2461db11bbba4ff02199ec0f0
SSDEEP

6144:TvJPOZkA8qTUumuidRogAQYx4hRTOnqlOvyiBQPp1ANv9pYemr7X87lpF/yDW1Vw:4ngAh4k7Z/H/5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Commons.Forms.dll

Files

Commons.Forms.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\jenkins01\workspace\ACS4.0\ACS_V4.2.3_2\Commons.Forms\obj\Debug\Commons.Forms.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 302KB - Virtual size: 301KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 952B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ