HQ[.]Infrastructure[.]Common[.]dll | Triage

Sharing

General

Target

HQ.Infrastructure.Common.dll
Size

433KB
MD5

248e38967c7f7b25e1341e738e20fa59
SHA1

43b309c7ad770ae344eed895550aafb4adae2fc0
SHA256

5f240e3fe72ecde40b2f771707c0703080428f4179eae41497c572911f07af7a
SHA512

a15f46e97c3eed292e02ce2b9b640ffd4a5bca7e4f22a631cad9002591f00801697a72edab384ff20f9e089f2959e5d5b20247ae89059d72168b06a39ec5b12f
SSDEEP

6144:m9GftWmY+HsTwkfjAN31w4TxHHEBRik317uleDborbEy01GMAik317uleDborbEw:pFWp+HsEkfQP2RsWbojRsWbo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
HQ.Infrastructure.Common.dll

Files

HQ.Infrastructure.Common.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

F:\HQ.Infrastructure.Common\HQ.Infrastructure.Common\obj\Release\net5.0\HQ.Infrastructure.Common.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 431KB - Virtual size: 430KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 956B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ