AutoUpdateClient[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

AutoUpdateClient.dll
Size

32KB
MD5

c318dbf26a737e2d6759bf08fd5b857b
SHA1

254f65293b6df0a89bb4779ca46907b4f00451a1
SHA256

63ea6182602207b25eaca9e32664712098834034776b6f8cde73c0a7a76e38bb
SHA512

4960f9cf855e5847301e0dd8b3e8318603d98c82bf2b0c7ededcecf4b904ce0028ab944fde5e49e62dff41eeada4b7018ff37f928d98c5fd16dbec5b7c7bed96
SSDEEP

768:ak/p+Z5K/MjtxYM7TdYgu4vFH3704vFH37qNGicFBd3zJrIG:LlMTX3vFH37lvFH37qNBe3Nj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
AutoUpdateClient.dll

Files

AutoUpdateClient.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

F:\ZHL\AutoUpdate\AutoUpdate\AutoUpdateClient\obj\Debug\AutoUpdateClient.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 840B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ