Contracts[.]dll | Triage

Sharing

General

Target

Contracts.dll
Size

144KB
MD5

2e16e162aaf42c3ed9ead563322ebbc3
SHA1

1bad9d3ff23cad92692e06a44d6a2deb39f0f122
SHA256

dce43b7a0219317cfb74f94b6338deba46a064b2d28bf809d29c3f9148bf7372
SHA512

882dffaec17f47bcf69218077dadf740bdcd76b8464662c95db1332ce865104c6f32450609ada899c3374f19fe61caa6f20a46ee7843e81352587475b14e2f3f
SSDEEP

1536:GmceTT6ooRI977SP149A/UyQ/btZgI977jmsoWc7zIjoRI977jE4+42qA4haduAD:GFyVerk/1TDhcdB6W3VKhK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Contracts.dll

Files

Contracts.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

E:\XTMS\Contracts\obj\Debug\Contracts.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 132KB - Virtual size: 131KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 776B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ