NanJingTianShuo[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NanJingTianShuo.dll
Size

15KB
MD5

2ad3b8ed5f3022df6c7eb54cc21a94d3
SHA1

261f8eb0a242b78e7e6e779230919b0ed043196d
SHA256

124b8a1b5edb2dbefbacde3203c97173d82f3a54bc88d13082497d036c14f840
SHA512

60c09f52b9747099e3c9243ef5a34cb444165bf148dee9b5d6e6f830032d01e24f558e6eeb87dfcebc773a86d20e07795ee96e45e3059b7570f66c7a4378229f
SSDEEP

384:rRTbprTUj7STja3nPbIcPBncZhGbzajIDweXymnt:rRTbpXUjmTja6h3xeymnt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NanJingTianShuo.dll

Files

NanJingTianShuo.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

E:\Work\ICS\Code\CoreServer\trunk\ICS.Server.Solution\NanJingTianShuo\obj\Debug\NanJingTianShuo.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 824B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ