CustomAggregates[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

CustomAggregates.dll
Size

13KB
MD5

ff1bd53325b16c2b8d12ab55625c0424
SHA1

49d0e0f5fc41864bdb1a8bc56d3567c217027a91
SHA256

768453936a41752779f5d4f2ada562ba6e5e3f7ccde20568c18b4c24f9ffc978
SHA512

802ae94ec1fff2799c74694754940562b883f3095ac1f7a944adf46237e78eeb8387e383ca5a63f0c15f17311fa741ff16bba9cbc3e97540be9de5285aa8622b
SSDEEP

192:5WRfXxyD+SWNGO97lAhTVPnNipQhaGkHUnl01Oqm0y1RBzy8ht+9BWaQXfX:56JyyNGO97lA7VipjTu8m0yHyBWP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
CustomAggregates.dll

Files

CustomAggregates.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\Development\Bitbucket\WebManager3\MDWebManager.Extensions\CustomAggregates\obj\Release\CustomAggregates.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 952B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ