HPSocketCS[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

HPSocketCS.dll
Size

130KB
MD5

ee6f9b20766de6904cdbc791f6df4a20
SHA1

cb28a1dd6b853961e8a8148d889dc0aaa35917b6
SHA256

abfd81f2b15ff0c8769202a69ab78e92be5a39fd4b65f83a389729dd92e2c882
SHA512

9d7d5b180532c83fb158c0f37ca9f7db0b159fa8eba7d4624cccadd502fcb24f534fd3cf3c397b9d637c56624fae0978e4c3c172d077d9f6bb54cce21a5bb6a5
SSDEEP

1536:4kRRf5pY9kgvQ9EnjQvdQSOwhpOj0VX1C6leNsjxeNohLjBiB9:6njQvtOwHQ0I6leb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
HPSocketCS.dll

Files

HPSocketCS.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

E:\MyWork\Cpp\HP-Socket\Demo\Other Languages Demos\C#\HPSocketCS\HPSocketCS\obj\Debug\HPSocketCS.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 128KB - Virtual size: 127KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 936B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ