NPOIExcelHelp[.]dll | Triage

Sharing

General

Target

NPOIExcelHelp.dll
Size

101KB
MD5

23af4741baf967474db5fc14369c24f2
SHA1

424aa91d5ed1a42a5c560168ccd5a890a866eb47
SHA256

0b59d75752eef39d26898b206378426fecbca1af356fd65dddfbd6156ad71fba
SHA512

156fdfcf8c5030e1c467981f28d07844bf510f4310a2ecf57dd2e8a9bbd543eb24b88f5a4ea17914bf56b9c01cbdef0d5790d137e7503f77af428710523a60fd
SSDEEP

3072:o4VK+8JwlmdGd6D0F0WDvG85cz9l3IIR1wKnaG:DK+BoswgXwj4IR1waa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NPOIExcelHelp.dll

Files

NPOIExcelHelp.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

d:\ZiQuanProjects\ZQWMS\P100141\NPOIExcelHelp\obj\Debug\NPOIExcelHelp.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 99KB - Virtual size: 98KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 880B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ