CURE_PDA2017-12-18[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

CURE_PDA2017-12-18.dll
Size

110KB
MD5

e1d83df96a034eea15ee3637b1751723
SHA1

b564945a807d9fe0f1a2fbc4a271bf01919f2224
SHA256

34061a08264448928a5fffb49cfca095ed9cd36ff4d27102f29ba29dbcdc3833
SHA512

04e114478aba8401423574c4d400f0997680f329d7b61f6c13ed094e83214b7fdfaf75e67b6a25fd095b536605ed77fec5fd1d76f5d20ac0e55586c1f6fe342d
SSDEEP

1536:6G7XW44w+Etye9TilPtMqYNsx2LngrQ9BPikzc3SFW:6G7XjPtyATi1YNsxqngrcBL0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
CURE_PDA2017-12-18.dll

Files

CURE_PDA2017-12-18.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\Ansen\WorkSpace\SVN\PDA\CURE_PDA\obj\Debug\CURE_PDA.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 108KB - Virtual size: 108KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 824B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ