XYCOMMON[.]dll | Triage

Sharing

General

Target

XYCOMMON.dll
Size

79KB
MD5

8feaf9f02618a85f055bdfc2867ebc5b
SHA1

022890dbaf7a2f9e55cd3f1a8a596da1f9a9e4aa
SHA256

680c0c2f1707bfb3f57bd9e042d09747d90ed61b84c50e2631f9d9e00b5a733f
SHA512

f38ee771393ff020d8999f9a550af98096f2cf658dad3909aa2baf80cc79f960403df65f1e1f68fe4966258ec382c5ab125982ec2b54e569ecd056dd6bbee861
SSDEEP

1536:F90+RsMuAQ3aYWlxpIrxgNLGzpJBysM8ZD2ozzcDWV+stNQQlkLkEuT/c8192vhv:dRsMuAQ3aYWlxpIrxgNLGzpJBysM8ZDy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
XYCOMMON.dll

Files

XYCOMMON.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

e:\x_work\customer\YBX\Code\XYSCM\XYCOMMON\obj\Debug\XYCOMMON.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 77KB - Virtual size: 77KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 896B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ