Kent[.]Boogaart[.]HelperTrinity[.]dll | Triage

Sharing

General

Target

Kent.Boogaart.HelperTrinity.dll
Size

19KB
MD5

274160081224101b2c5921448bd66a0a
SHA1

f7325b75d279f2465ff01b54f866780e4d9e53c6
SHA256

d2ac4c2138c45446e23f803cf1d4d23fec8c4a1a979f99020a8f10b749a1ebf2
SHA512

95101b27b417930ca18698d1f38505ab947f4974845d080c8205d740e232292b2063e9f4071a65e7ee3cc22c466652a7c16b6b77fd38510a3ab8f64f36b7c5e9
SSDEEP

384:Ku8mS0/zawW0QLmVUyI5mCpluQy9DUovvKlDtzqMUq8vfYqBF:KuH3O0qmVUZ5VpIvsTzTe7D

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Kent.Boogaart.HelperTrinity.dll

Files

Kent.Boogaart.HelperTrinity.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\Documents and Settings\boogkent\My Documents\Repository\thehelpertrinity\trunk\Src\HelperTrinity\obj\FX40 Release\Kent.Boogaart.HelperTrinity.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ