Ufida[.]T[.]SM[.]MessageTransfer[.]Interface[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Ufida.T.SM.MessageTransfer.Interface.dll
Size

15KB
MD5

9f1355edacf98f5a0cebd925ea786a16
SHA1

d4b0306d2b6581ec872c7486e428b8d2cb30ecdb
SHA256

a6fa697a2e7bbbf86d62ec21f06bc8db3fd8bf64e5a9ff8feea9d8dd3c140955
SHA512

15360d6da8756c79fb0e8b85c3e16ba76e646ac4e578a93aa5c2be6c58b9f79523c8efefd90d455df94b485a9ecc40c02173f7eea932f1dddd1f5f699e815a71
SSDEEP

384:fLstEHHYvNOSGOeCyWYkOs5ploDLKFA8Wx:fLstzrsW7b6DmFAb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Ufida.T.SM.MessageTransfer.Interface.dll

Files

Ufida.T.SM.MessageTransfer.Interface.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\Jenkins\jobs\Tplus_1230_Patch_Compile\compile\tempcompile\SM\MessageCenter\Ufida.T.SM.MessageTransfer.Interface\obj\Release\Ufida.T.SM.MessageTransfer.Interface.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ