SystemFramework[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

SystemFramework.dll
Size

180KB
MD5

b26cae2cecd8b7e04f5ad9bc5632d47a
SHA1

72c5e32376ba8c0ca3e0ebf0919ca7e51c449bcc
SHA256

c78e9c3f341195913fa24a9c0a8749ed6e0c68db3fb782bf449f3646a94a5a31
SHA512

a2f29e57c9b5d74057323b24a5ac71fab9b4082496173bc32ab8df89eff901fd74f5147f3d017800680a5ea9f9f3d4dbc4eb636f6e6bd58152ad89ae1bdd0f64
SSDEEP

3072:vpBgXxk3S+NxxjWLXOaRM7P+v9xLjXGK9KAKxKBKlKWKTKEKjKpKbRK+KyKFKqKd:v/MWS+NxlWLDRM/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SystemFramework.dll

Files

SystemFramework.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

E:\XTMS\SystemFramework\obj\Debug\SystemFramework.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 168KB - Virtual size: 166KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 880B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ