SunnyUI[.]3[.]0[.]2[.]0[.]Fakes[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

SunnyUI.3.0.2.0.Fakes.dll
Size

3.6MB
MD5

6a1505d4b343b9443515a2f1dea05168
SHA1

d587d2be6e4d8dd46d0ccb55a637efa1b2b1e407
SHA256

6c71409274dff9db286e2e6ebab4b90c96fa59554a5df511ca5f6a3c2093a8a9
SHA512

cbeff6e9b5818495468120dd4df2245f20c5ea2a7bf74e7fac263df8e08f507920f0f1b47b0c6d31cdc7bab53a4d9457b1fcaf33c0861e1886a6b133a72d4c60
SSDEEP

24576:lSeVAIuBsM9GzdyBi4jeeX6rod0VmcE8iwOQfkozNrcUrcE9GaKNceXG0oyHliG8:8e3uJn4Vtp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SunnyUI.3.0.2.0.Fakes.dll

Files

SunnyUI.3.0.2.0.Fakes.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\Users\Administrator\Desktop\美丽虹ERP\TTJSoft - 美丽虹T8(新界面)\obj\x86\Debug\Fakes\sui\o\SunnyUI.3.0.2.0.Fakes.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 3.6MB - Virtual size: 3.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 824B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ