LinuxProba[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

LinuxProba.dll
Size

9KB
MD5

31b129e66dfe375c07ac5d5ed77c0c3c
SHA1

06b9d5b2ba4b40682c7e7e8152a9d7d38326d95c
SHA256

c300363035da9519404ed685e3107939d17f87be0e2260118725814c5432d5c8
SHA512

e2f103458d1fa264ab384febc13fd6428115f70f254476f8fe8d9ee95e418ed1c41a39b57118cca377b291e63d20cb13b52dbf5e48f7c3b7150aa9a00a91f20e
SSDEEP

96:LQtDUZdBsog07jcXBdmjaMCU7ULUvYLKUEVUsqC+8U046sXUnuUkfULnQwotU/c9:K4uKoBsFJ1fFQ4DYVpmWt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
LinuxProba.dll

Files

LinuxProba.dll
.exe windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\munka\linux-webapi\LinuxProba\obj\Release\net8.0\linux-x64\LinuxProba.pdb

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ