Frame[.]Core[.]dll | Triage

Sharing

General

Target

Frame.Core.dll
Size

25KB
MD5

8f411787a8cb6a7d76044dc4a95e04dc
SHA1

90c1422f54d557a4bc94b514e0c83588ab3569ad
SHA256

a4be6f84d20e9ac1ac397e9dd15aec3d38f80e09459eb601c61783427c68f355
SHA512

7f20fe890529cb1639bc220aa47c37d4f002b85bfa5479424865fc4c476784f269e3721da094c9db81a594e6988cb03258e254a2af0f985ba18fde97b87be422
SSDEEP

768:aX39ULj2l8C5k2/hnWptHhVcZ4E14hVIINUj+YgWexDYQdRTY:GULSl8C5k2/hnWptHhqaE14hVIIt5WeW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Frame.Core.dll

Files

Frame.Core.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\wangjx\project\.net\HGSOMS\Common\Frame.Core\obj\Debug\Frame.Core.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 944B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ