SFA[.]Service[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

SFA.Service.dll
Size

135KB
MD5

bbfca6367449bbf45a5b80a9997d1320
SHA1

2355395053e1264d1b8b7d45ee3fdb9939ab714c
SHA256

f537777b069286e5b6a7d649126bb8e65daa1acb54fe1c41e6c74e750c454a82
SHA512

3e217acb76b819b345fca53b8a561a4b1fa294156fcfaf87e1b590122b376b7500bcd70d41efd1c8ffab4275cbca0ef7201dc0b0cd836f4b5894ea397dcdecf2
SSDEEP

3072:LBtUCZ8tYRt19x09VPWbFh5lr3vn6kLkZpGw07F:5qiRtjC+BLl7v6kLkzG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SFA.Service.dll

Files

SFA.Service.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

e:\Projects\SFA_CORE\SFA_Base\SFA.AppService\obj\Release\SFA.Service.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 133KB - Virtual size: 133KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 808B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ