SwordCrown[.]Views[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

SwordCrown.Views.dll
Size

24KB
MD5

0357c43c12443f5b15b8862b5b641298
SHA1

f8e20e9ecbfa4cd053d95b63ff18410cc2123cb3
SHA256

fcdb5056c4affbb4e0900a9175acaa4eb9fec136689e9e69dcaadd1eb37aa24c
SHA512

1ae8637984ded5c5c0633ecfb1e21d687fb8271825155cc38d090cd16618c99b921159ec6c2b28cd296f74e8f538f047901e3193635c82ce64d472bf2b4d3d87
SSDEEP

384:UaM50w861ceTnPf4D2ChDv1ksaoI7q23B3mkt4SiN/Ep1okh7:XEt1ce8ksQONTa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SwordCrown.Views.dll

Files

SwordCrown.Views.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\Users\russ\source\repos\SwordCrown\SwordCrown\obj\Release\net5.0\SwordCrown.Views.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 852B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ