DAO[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

DAO.dll
Size

1024KB
MD5

3fbd41667aa594b96e18f5d4c4784d03
SHA1

4e8ccd757d924bd6f81431140fcff4c9aa82bfd0
SHA256

67f70958f733aec11f7cd565e6065e687e16eb45020000476ca48a554e5f5381
SHA512

2899148b1b13233a6555c5407910f226bfe715078021f1830a36e0006528210dd1dde2783f3e390ca36d0a18ef62a957d68f7431dcefadd7933d054e589f1d16
SSDEEP

12288:v6iAFW5mkiFfNkCax7p2t1vVWUpDJlYRJ5AjU2bJXX0:D2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
DAO.dll

Files

DAO.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\ytsoft\Group\C6.Net\Custom\BaseMent\DAO\obj\Debug\DAO.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 1012KB - Virtual size: 1011KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 848B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ