core[.]dll | Triage

Sharing

Copy URL

Twitter E-mail

General

Target

core.dll
Size

299KB
MD5

e8c97849a14500a7caff84642bf14c29
SHA1

93ef3f5935b84e25fe502d5311651b9ece21b8e5
SHA256

bd82d7dabd94cce9db8023e4d86184d55278c0a9d089f05f41c4fc60e53dcd55
SHA512

e92a933b4e3caf81b26b6d7343379a6fd5c49c3941fb9a2b01ecb78357c917862292d2260526ddbd5a8febcb23c9a082ef3144a9a69d860e1678edf53158ee88
SSDEEP

6144:OrOIFqIMTdg2iiScxT8wBQ44F9naHIWDqxktiSWCIDbJiFOTL59ged:OrOPIMTdrScxTrxoWDqxktBWC0UFOH3b

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
core.dll

Files

core.dll
.dll windows:6 windows x86 arch:x86

cae23258ca2c237b6cfc585a1db18924

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

G:\C++\rehlds-master\msvc\Release\Core.pdb

Imports

ws2_32

ntohs
gethostbyname
inet_addr
WSAGetLastError
WSACleanup
gethostname
WSAStartup
bind
ioctlsocket
socket
setsockopt
closesocket
shutdown
recvfrom
sendto
htons

kernel32

LoadLibraryExW
WriteConsoleW
HeapSize
CreateFileW
GetStringTypeW
GetProcessHeap
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetCPInfo
GetOEMCP
GetACP
GetProcAddress
FreeLibrary
IsValidCodePage
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
RtlUnwind
RaiseException
InterlockedFlushSList
GetLastError
SetLastError
EncodePointer
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
DecodePointer
ExitProcess
GetModuleHandleExW
GetModuleFileNameW
HeapAlloc
HeapReAlloc
HeapFree
LCMapStringW
MultiByteToWideChar
WideCharToMultiByte
GetStdHandle
GetFileType
CloseHandle
SetStdHandle
WriteFile
GetConsoleOutputCP
GetConsoleMode
GetFileSizeEx
SetFilePointerEx
FlushFileBuffers
FindClose
FindFirstFileExW
FindNextFileW

Exports

Exports

CreateInterface

Sections

.text
Size: 222KB - Virtual size: 222KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 58KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

cae23258ca2c237b6cfc585a1db18924

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

ws2_32

kernel32

Exports

Exports

Sections

.text Size: 222KB - Virtual size: 222KB

.rdata Size: 58KB - Virtual size: 57KB

.data Size: 7KB - Virtual size: 35KB

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 10KB - Virtual size: 9KB

.text
Size: 222KB - Virtual size: 222KB

.rdata
Size: 58KB - Virtual size: 57KB

.data
Size: 7KB - Virtual size: 35KB

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 10KB - Virtual size: 9KB