SYSUI[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

SYSUI.dll
Size

56KB
MD5

81da4926b5ca7ae6b3727d4c2f477916
SHA1

6400ec6328df7730fe905e13ab629338529cc92d
SHA256

2c2fdf32ab2fb9e49f1a36c350a816c086ec18d7b4deff8d25cb19a63ef4c8d6
SHA512

0a2b346535d58b9bffd93cf60a9144a7b60d1da4c5f436dc29093031f09b01d3cd1d8ec9c893e07ef3046285f1e5082c582a3257aa993d5b61da7773b1584276
SSDEEP

768:PLSxOs9imc+dfhlmYC66GNhTJaYkkADLp48Z3qtog4Po+bnNYqT:DGrXTTikQ4AzPg+r

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SYSUI.dll

Files

SYSUI.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\Project2\EzGroup\Source\Custom_MES\FrontEnd\SYSUI\obj\Debug\SYSUI.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 54KB - Virtual size: 53KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 856B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ