NTLibCom[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NTLibCom.dll
Size

11KB
MD5

ff844f62fdeb16c031649dc4aa6d97f3
SHA1

ff8a3ec4fc9aee265aaf415ce0effdbb0e162d4e
SHA256

5a743bfee544b99718b1874e0bfdba27a1db2a569b03eb800a35d5a5b92eed36
SHA512

1d343b8a6b017ba6f3802f0e957b6cbcf627799252841f29660c46ac85db1f17a047563a4accaea144dc47bd76790d7e54ff64a5718b1f14769ef4a0979f722c
SSDEEP

192:N6jp0wuldghme6I+/ntoxIGNZPGUCqulTxVDp//RDGtTu2z0b+VUtDGGUcHxMgh:fldgh16yxIGDPzNulTxVDpeEx+cW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NTLibCom.dll

Files

NTLibCom.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 776B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ