UP[.]Utils[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

UP.Utils.dll
Size

88KB
MD5

fa08148530b264bd52d86c199ba483b4
SHA1

136f5504ea42f7698cdd51351d833f6baca6a08e
SHA256

de1ec3cd5a4db050bc4fa4ad3042656d4a7e198767df2b227490a5d1a21a1053
SHA512

f56347eaed122ee0745e3d75ed830432cdb34b8d1145245806bc379dffcb2781a128cf501fcfa195c1a8348087d6d75251af4bc80baec5155072c36944d2df23
SSDEEP

1536:qQeRjm+/NiuO7epD0Yhd0leMfqEw/Eitb0SrlSyJZV2HMFbEE9:q3auO7e90Yhd0l6Ew/EKRV2IEe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
UP.Utils.dll

Files

UP.Utils.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

E:\Cread\UP\BaseFrame\Utils\obj\Debug\UP.Utils.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 76KB - Virtual size: 74KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 728B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ