TestLib[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

TestLib.dll
Size

4KB
MD5

52e443c6e1528bc6ff0c61b382e099d8
SHA1

ec4a614be34ae209222c3c67fe780cbbcd16c4c1
SHA256

747ff71dc117d87abca78898d08e42cd9456ac8d10b9b16347d4965139011a7e
SHA512

89b9a30d8ffbd45942b6c02c09968201fdcc88740527a2e49b947ac098302236f0f780df734b5381d2924de1faf9bf8a400ee4e1d44f83de54eb96e8ae27a69c
SSDEEP

48:6gbDe9bX4y8cIHPPENeVO/EGuJUxcvODYWi+hOIJKqLZWCWcloFMlFKIvtF:FUzxIv7V2IODYWPPNWlcuMPKA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
TestLib.dll

Files

TestLib.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\D\V30_New\V30\插件库\Lskj.PubBill\TestLib\obj\Debug\TestLib.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 832B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ