UPService[.]ServiceRule[.]dll | Triage

Sharing

General

Target

UPService.ServiceRule.dll
Size

729KB
MD5

e88075dd68c3b18be2e31171fc5c3f82
SHA1

bb5d6084d964248322d4ce15e05c8c1edf351fd4
SHA256

4a53d38d790dd65e7bce06ff14ef236d71319e3f4af5ddd43da2222d2cba2550
SHA512

31042c37f012b322be21c2dcc493b8e1614ac247604fa5c05b046479e0af71ebe8487e4f2d04f34372bdbd9ac38c1f88c7a0e424f0972b4b8a7e51d6cfe86c2e
SSDEEP

12288:p1rKnw4FmWjYysKuq33+DfxGkV1JxvOTvOqVu6cLlGRiDOgvOT/vO6VyUVuXBO6:brKzsKuG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
UPService.ServiceRule.dll

Files

UPService.ServiceRule.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

E:\Cread\WCF\UP.WCF.RULE\obj\Debug\UPService.ServiceRule.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 727KB - Virtual size: 727KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 872B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ