UP4[.]Localization[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

UP4.Localization.dll
Size

872KB
MD5

2b442311f1858864b86bb3dab0315692
SHA1

502f91ac1ad87328be38e6f5457ecc1a84391ab6
SHA256

e950851607ca826eeda4f096a91d65e5aeb9ab70695393ae8f8c01cab6d4f52b
SHA512

0077592372eb4234e65429b4efc1546a5a3d784d66c558adbb8c0dcdef1b988b2bcf67c341832b4b436b86a48f89f74548e208317440b4b709fd421bcdaccd47
SSDEEP

24576:QpcRHW4YjcpHpq9hy31uh1v4hTYIm2hoSUwDU+VLz7BpRj:Qpn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
UP4.Localization.dll

Files

UP4.Localization.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

E:\Cread\颖东\UP4.Localization\obj\Debug\UP4.Localization.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 860KB - Virtual size: 858KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 760B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ