Ranking[.]WCFEntity[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Ranking.WCFEntity.dll
Size

6KB
MD5

baed368d9375968d0ad7fefbc2ba40f1
SHA1

a473db4f368622825c47b7f9ce0fc6865960a8f4
SHA256

38d46ef71082b3e208c7787ebc59615457d0ed2ba7ce828146a34a37b1eed7f7
SHA512

0c4c91b1f358059ccb29b1ef2cf7e2dd2408adab14a9651ecf055d2885745f186fcaa0ec345d7d65c1f5b847f5a529b0786d578cca756bbe0fb7cc7780b77948
SSDEEP

96:btuYpznzaqBm1inGxJws9tjjjjj34cPB0g093ir9FDOZ3wfWeDLDCn:puszOIn2pCg093W9YZAfWeXDCn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Ranking.WCFEntity.dll

Files

Ranking.WCFEntity.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

F:\MoFang\Ranking\Ranking.WCFEntity\obj\Debug\Ranking.WCFEntity.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 988B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ