NPOI[.]ScratchPad[.]HWPF[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NPOI.ScratchPad.HWPF.dll
Size

311KB
MD5

694d228ae7e62ae58b4f8111bfbb367c
SHA1

91ba766cdd1a2525dd23760c7d8ae66b705bc247
SHA256

82380a182b75859543d2b490832495f97caebc38844a31a64e472b313ca4ab99
SHA512

11c573c3f0094635568c26890b998f90ea6c14ee202682d6ca31b36263919d1284c968124547ad843c9ff4cd3cbab5c4cf9a56c0fefa4de12ef3bca4b49027c0
SSDEEP

6144:6W3KEeI2ECwfyzWnfNXBrPvta/QPy1bZ1+0u1GDd:6W3KEKANtPSbTJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NPOI.ScratchPad.HWPF.dll

Files

NPOI.ScratchPad.HWPF.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

E:\contribution\npoi\scratchpad\HWPF\obj\Release\NPOI.ScratchPad.HWPF.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 309KB - Virtual size: 309KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 920B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ