LLRP[.]DLL | Triage

Sharing

Copy URL Twitter E-mail

General

Target

LLRP.DLL
Size

409KB
MD5

880e403d282c82d94ea8c4ba86f823af
SHA1

8c477f0ea3e8b62619b47b8f7b87c7ed24826248
SHA256

18c17388deb23ffaba872d9f5c11754d5f41c5ab826cc2401b9e1a5e435b8db7
SHA512

1508ba9cca1c89d5cc53f73f3dad8a038a778656771e2a2af307ded39639a6fde55e1990d90fb97ae845ce8898fc24a132827fd1edf777f66bd0f742e090c815
SSDEEP

6144:1KJhPf/keHU3q+ASzttZ7k1dPTepUcM/m+e+yH2eMmKdBEdusepCWg+OlSGARy30:pnMmKDEdHeHg+Ol

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
LLRP.DLL

Files

LLRP.DLL
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\projects\ltk\ltk\LTKNet\LLRP\obj\Debug\LLRP.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 407KB - Virtual size: 406KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 840B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ