cwber[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cwber.dll
Size

57KB
MD5

5ca6bc4c646427f6b89c5b693e5d5ad9
SHA1

6483edbe4d67004b0f8b320f8d2f7b337bf80302
SHA256

d43357608f0400c6c02aec28d4e108124e700d3764687f54a4b4e3e2875c0c2d
SHA512

964b79238774108e5936f47066c95f0729ec6863315a909da22eeac2a67ea10dd33ff42fbc125cc38af56dc1212d44257df5e3d35b287ace545d94cbb380fb10
SSDEEP

1536:Un4BPXL2z+QVnmyfo9AiJYaAipyWrkGQZiYpGm+pHXBUT4CWOV+V9Ut+4Gb1llOj:U4BvumcGON3nm/DaJwoZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cwber.dll

Files

cwber.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\Users\84900\Desktop\浏览器新\chorems\ChromeWebBrowser.net-debug-1.3.3.2454\source\cwber\cwber\obj\Release\cwber.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 54KB - Virtual size: 53KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ