C6[.]WebServices[.]dll | Triage

Sharing

General

Target

C6.WebServices.dll
Size

293KB
MD5

9404d5018928c83eb2c71bc96f8eb492
SHA1

e1522c994f7d00b5c760af9cf3c40e0c35249ff2
SHA256

582c25521c1485372534b3b6d9e5b442d4c5bcd1b7c8c8141ad94af09613ce2a
SHA512

d5a937000f083c17b8b2f52265cc95d778123f719b0beb73b0eb9db335489fcff4c7e7a3ee18e7f31e73dadd7196b9095e74e5f5710ff642777a0ce2e44ac590
SSDEEP

6144:juWq+1/VZmMoPsKTaW3DJGWtkz9S5hcob7r:juNs/VZssK2Wdb7r

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
C6.WebServices.dll

Files

C6.WebServices.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\ytsoft\Group\C6.Net\C6.WebServices\obj\Debug\C6.WebServices.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 291KB - Virtual size: 291KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 956B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ