EnvDTE[.]dll | Triage

Sharing

General

Target

EnvDTE.dll
Size

240KB
MD5

5ced75dc6415d2f84520c609210860e5
SHA1

9bee79011c0679b54dd6f01a933035acd2c1a50e
SHA256

2b81a10c4419b4e7568676ff0691d5002cd423fc822e9768200f3e87a37f86b6
SHA512

d1c837ca912cb1e027fba727932c4e8850848346dcc722f96d2c277a97b915b75dadf7dd9d808ec89242fecca60256b278d18b284241d0fb465b8a929c6bb480
SSDEEP

6144:uVxSPjunU+GbgAEpi4IRe3cBRggLrYdVL064peHPKPbPEP9P+PPPoP52ENyMn+iB:uVxSPjunXGbgAEpi4IRe3cBRggLrYHLy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
EnvDTE.dll

Files

EnvDTE.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 228KB - Virtual size: 224KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 952B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ