UP[.]WCF[.]CONTRACT[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

UP.WCF.CONTRACT.dll
Size

110KB
MD5

c38be0d0f0c9cd14e53937e37cc63ea7
SHA1

81867be8ba5285c44be8cd57d606d98eb60fbf76
SHA256

11249a52ca7848efe870f82b40e76478a5649cf6a70ffa9abe95b4a61d0577e5
SHA512

52b84ec4c9da3757682f0f5d701609e01e79b964ab202e5a89feb9e966e12d1ab54bb3cf936cc75962f2272ecc71375653407d4a9ef8eed5071b84f5969c435a
SSDEEP

1536:bCBG3kci3hel//Ygdws5+16YFHyQT5yBpf3HUgxTrHi4pf3UIg:2ww3hel//Yjaf3HUgxTrHi4V3UV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
UP.WCF.CONTRACT.dll

Files

UP.WCF.CONTRACT.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

H:\Other\UP.WCF\UP.WCF.CONTRACT\obj\Debug\UP.WCF.CONTRACT.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 108KB - Virtual size: 107KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 936B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ