RoutingServer[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

RoutingServer.dll
Size

39KB
MD5

8eff4ac2564bb0e52489da1a20f038fd
SHA1

f331fc2f493f77bef4e2b2a3aa1b89daf475aa67
SHA256

2d337e7460015a6d8af8bd7f893c616a8c8ff4d06a7ba47ee8043d5bbf8544e1
SHA512

3e611cd0d4c08e61e8d577fb584c8b6ae4e0aaac171e11b158e5935cf5d892420add86d8861a77570a3aea86e4cfe11a69af00956afb5f3c2f7732b2ace52944
SSDEEP

768:VXJZWSF36pO3DXINaVQD4qPNWpsFHKOp/bGb00D:HZWwZ+YQD4qFbFHKC6b00D

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
RoutingServer.dll

Files

RoutingServer.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\Users\admin\Documents\Visual Studio 2013\Projects\HAPSV2\RoutingServer\obj\x86\Release\RoutingServer.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 864B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ