PowerDBSetup[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

PowerDBSetup.dll
Size

51KB
MD5

a36b9786e7fb350a8f0a1d06bf521665
SHA1

5ebb5c73f6dad5ed7f81583e7659fcac8f3b912c
SHA256

e0c9fb807a7e0fdf3d9230bc3f7ff7491202d2f275cc595abd358281bafab542
SHA512

8ffa7a79ac76c168633d2fa11305d239f5828a68b31ba87af253fe473270d09ae43e2abf434736166408e73fb30a99e4d3168c2fa27e0260b95fd37419211f24
SSDEEP

768:YklhjCd9L2oNiY+Egza73MYwLLqC5Ete57jefAZG7qI2YWYz6nwGdotehQN4X+BX:Yklhm7ymqEtc7jk7qIwYz6wUoEhQ+YX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
PowerDBSetup.dll

Files

PowerDBSetup.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

d:\GoodChief\PowerDBSetup\obj\x86\Debug\PowerDBSetup.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 49KB - Virtual size: 49KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 936B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ