Ewewo[.]ServiceRef[.]dll | Triage

Sharing

General

Target

Ewewo.ServiceRef.dll
Size

515KB
MD5

13ab5eb3966905d22ebd23904ef25b86
SHA1

d2d625081eacfba97548e512dc8da357e269f903
SHA256

3ab60c53778d17540a8af546873a11e0a6630173f8b73f7c5154275a2a3a30c9
SHA512

9b9816c0a35ff292cdc16f795cb3721c55b60163124df7be74b1e1c62b32d912c9df4df86f9a7ae6a5b1dd6cd76a8191ae1d4a30964ebeecd7907c4b8017b547
SSDEEP

6144:UnWl4V31DSyuX8HTaV7ngOmUq3/leHVUWSGC8YCIHdkrFRbv+W0W6p7X:UnWiFMV7nvH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Ewewo.ServiceRef.dll

Files

Ewewo.ServiceRef.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

E:\gitwork\hotfix\hotfix\src\Ewewo\Ewewo.ServiceRef\obj\Release\Ewewo.ServiceRef.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 513KB - Virtual size: 512KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 988B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ