Libraries[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Libraries.dll
Size

5.7MB
MD5

6f3ec55f42d19343bb40070e65814b61
SHA1

9b48810ccc74e71c69c8ed38fe5b73536db6d52c
SHA256

8413399de6abd349a8adb549190222237a2b06d50e13fa2cd8bdf1c235b3ecf1
SHA512

77fb0c860abccd13938cb663c99a271d6ab0a6ec54583865be5e1149a255ade138ef8a37386b792751f4e3ad398489a51bdf3d4e05deff278a5139984aec5ee8
SSDEEP

49152:McEM2947ufubpeDd7Mm+e+PEaUF44MIQWgv8vXYsdsCt5rr+BlHIJltCppHCVCKW:G7/QIQD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Libraries.dll

Files

Libraries.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\Project\TWPMS\HM\Libraries\obj\Debug\Libraries.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 5.7MB - Virtual size: 5.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 680B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ