UPService[.]ServiceRule[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

UPService.ServiceRule.dll
Size

721KB
MD5

28b3e6f25871293ccde21c98f6bb6495
SHA1

edefd7e64629c169cc9de15e0449e527fcde98ff
SHA256

fc62bb2fa7f48132239340c42b12eeae0d9d0e41b40f914eeeba582d0f51cbc5
SHA512

566f9deaebf8cde2d93945623af0bdd69938d0c552633483ac952e4c57f26235444c08be7dfaabd474e0c00220d93495a6a2125514cb3578d4974bd55c97d2c8
SSDEEP

6144:PbgFO9glFDbFACxOVpNwMWcHJS90gYy5MXZMIDG9mFGbA9CR9wkANttgIu:Pg3bFACx4xJSWgj5MhGssAg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
UPService.ServiceRule.dll

Files

UPService.ServiceRule.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

H:\Other\UP.WCF\UP.WCF.RULE\obj\Debug\UPService.ServiceRule.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 719KB - Virtual size: 719KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 984B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ