Stock[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Stock.dll
Size

249KB
MD5

4841f7a0c90361264badc441b75f792f
SHA1

9a023c449bda8871b934813cfb686ffe127ceeb0
SHA256

fbdb6c09e5303a3688af7542e5fe340fc1a10b05b4ee3ccfb06de2ffc5e39491
SHA512

d5d024fb8aa17f93f750c277a3beee02c19b405ada120d6f41553eaa3e6a16ade6f34f74be635efd81616f51aebfcc7eae6dd0aaccc17c5bf560a2f601d115f3
SSDEEP

6144:5t8aPSMXwI0HmDCK1CU6/ZrLDRy0i/ZrLDRy0:T8aPSMXwmP1CUWrk3rk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Stock.dll

Files

Stock.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

E:\京沪彩印\erp\Stock\obj\x86\Release\Stock.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 247KB - Virtual size: 246KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 860B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ