IconCodecService[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

IconCodecService.dll
Size

9KB
MD5

523cf74a52c9a1762da8b83aee734498
SHA1

e944b8fa64c2bf09c1123d2435b46c1f384e4471
SHA256

5a739182b916738b611e1bba9098f8bcc8c4e2cc2cfefd1bc5ce7941d11cedfd
SHA512

175ba2b324bb04b6d3e09f7a9a21e5d8d14e9b46a273168d2d41231e9c91253de93552cd9f08dd250599358bb76ebdb5ef9ebf54b4bb65cea1087b1e224b17cf
SSDEEP

192:KlQAfqsTenEtK4Y81Cpu02ifgG15WSu+qWM/LK:MQDsTNcuEgGvWt+qWMD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
IconCodecService.dll

Files

IconCodecService.dll
.dll windows:6 windows x86 arch:x86

ac47f2f74bb08a3bfa86e8cafe7f5aa8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

IconCodecService.pdb

Imports

msvcrt

_except_handler4_common
_amsg_exit
_initterm
free
malloc
_XcptFilter

kernel32

FreeLibrary
Sleep
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
GlobalFree
GlobalReAlloc
GlobalSize
DelayLoadFailureHook
GetProcAddress
GetLastError
InterlockedExchange
InterlockedCompareExchange
LoadLibraryExA
QueryPerformanceCounter

user32

PrivateRegisterICSProc

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 912B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 344B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ