SandDock[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

SandDock.dll
Size

220KB
MD5

1477dafc7a4ce76838fcc7310a51ca7b
SHA1

1a5d57c45a591db8aa5312670bb075d1d8e68ccf
SHA256

d0adb7c63e3354593ab039f23cddd85d6c2a860107fdbed32f800b9f5b4b09dd
SHA512

ba601d5261b9e06a138410113366f1c03eb17b6f5bbf711bceafd8e5a7375f5357fea68c51eb3cea05fce0d4aa331468ad8618312719b4aad6ca5861bf3824f4
SSDEEP

3072:TrndzOelujZd8HpPN5+RL8Zm7C45mjlDWVVgHr29z5zOWfVCuzntIJ:3phiZ+JFYL7hVgHqzgkCu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SandDock.dll

Files

SandDock.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 208KB - Virtual size: 205KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ