UP[.]WCF[.]CONTRACT[.]dll | Triage

Sharing

General

Target

UP.WCF.CONTRACT.dll
Size

61KB
MD5

1177505ada6874ee13535faea9b5d299
SHA1

efe83d743dd5cb769bf7b74812c9e9eed2e10170
SHA256

14c5a668c92c2f0e302fc668e0cb8c4c1cff624e7247c943f35de03f135824dd
SHA512

b6499b6d2464d553bf5f7c46713506054a001c511fa68b83c54aa1f340057aa6bb553ae36fc1a910e4b107c2a85e32538157be8f92016083b57297418b6ec89c
SSDEEP

768:SsnZRj/jJ4xS/TD7MB/DkSAj8zGSLyIBKIVfHRrdvBUdUImHTFXFeKpSFSiH9efw:jL/KqsQfjgyIWIT78HAz74

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
UP.WCF.CONTRACT.dll

Files

UP.WCF.CONTRACT.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

E:\Cread\WCF\UP.WCF\UP.WCF.CONTRACT\obj\Debug\UP.WCF.CONTRACT.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 59KB - Virtual size: 59KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 824B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ