UP[.]BaseFrame[.]dll | Triage

Sharing

General

Target

UP.BaseFrame.dll
Size

164KB
MD5

6a994b7f5779a59ca72564e2afce8d81
SHA1

99e5643db8b32e9bca9e9faa20197246df73446b
SHA256

d4dbf85fdd70b931469a0b6e26837f24c053e2f3fbd06f306fdf167a53636406
SHA512

66e28c7af996b4989e70f8a2c81999e9509359517bb36d27704ee18157054c59e6b962980a3f31c279d336e858eb8eee685f13bde64f0b3b7ff7a530b9688b99
SSDEEP

3072:EkFzbzsXsqn6RnDGNYM+JkwPzj/3HzQPXOASl7bKDgB02L7t:EkiXKnDGNCJkwPfS+/f7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
UP.BaseFrame.dll

Files

UP.BaseFrame.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

E:\Cread\UP\BaseFrame\UP.DataAccess\obj\Debug\UP.BaseFrame.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 152KB - Virtual size: 149KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 744B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ