ControlLib[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ControlLib.dll
Size

454KB
MD5

03f996effc23398a451fac3be5ccd2b7
SHA1

4dbf2d276210db7a60b91557d97697e3f13063bd
SHA256

b01e1d9d1855a1b6adb7dd7703c83a21987e43a5facb58c5f21805fd44b9c761
SHA512

ce7e7d703a06751c09859daea8fb527a04976b3fa7ae85f3e6817aef143e52250e31a47b41893cc9c49b3042f71394b5d2a0c60387f912bf11ce8237494ad6b2
SSDEEP

6144:OpcNH/G83gHLZuLtB0pBWSXHxVYaEjUf4s5QbZ1LmGOg4:OKQgLVQXEa4e2ZoG34

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ControlLib.dll

Files

ControlLib.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\Lserp5.0修正版\Lserp5.0\lserp_cs\插件库\ControlLib\obj\Debug\ControlLib.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 452KB - Virtual size: 451KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 872B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ