SortServer2003Compat[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

SortServer2003Compat.dll
Size

40KB
MD5

c6d7a4e26f57f53ddea3285de1fe4ca3
SHA1

81f09113b28c0ec7b1acdb220e8b5a35b3eab48c
SHA256

484006a6bde1eccdaa2d8a1f4b50a142dbc7f5d89cfc1c0534aecb9edc3962f1
SHA512

6b4c98a60b4381d87825f16bc6956d5db0aac63fe2b7cca1c462e9074200c8f4b79a3687838d322331d83c5231a81e61b78f21e7852549bd4a53d068d6fe124a
SSDEEP

768:/ZLfRLO118Ql2cDmpeQwljuIhxcfRiLhHVG1vn5HKq:Hi1eQl2cDmprwswifAhHVavxK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SortServer2003Compat.dll

Files

SortServer2003Compat.dll
.dll windows:6 windows x86 arch:x86

ccc1d6a392b3d3cdbe5097ba4360a030

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

SortServer2003Compat.pdb

Imports

msvcrt

memset
_initterm
malloc
free
_amsg_exit
_XcptFilter
bsearch
memcmp

ntdll

RtlAllocateHeap
RtlFreeHeap
RtlUnwind

kernel32

TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetTickCount
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
Sleep
SetLastError
GetSystemWindowsDirectoryW
CreateFileW
CreateFileMappingW
CloseHandle
MapViewOfFile

Exports

Exports

SortCloseHandle
SortGetHandle

Sections

.text
Size: 35KB - Virtual size: 34KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 822B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 720B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ