Qiniu[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Qiniu.dll
Size

117KB
MD5

719d09ebd4b727e1e210ac9746d883e5
SHA1

bd9b240de340e2717f9f57ca9f8071cd421f425d
SHA256

77e786cd3dd4e79713b3aed79d1acb39e82095904449da1a6f2624985ae0f6da
SHA512

7e2a87c979c86a643b8388e51cb9c447c2216ea76e8faacfef11865715b22a13aea786cac099b56b4b22c449f38062b086866c39b48e95051651bae513e10223
SSDEEP

1536:tJ57Rg6HfOP7/T1p/5DtAoOSI/tvCM7/uhxpgC81RFYQ1Q9t6mY4KaTLCCkn/s:tJc6cP1jDeokCMs+71RPsY4KaTLCCkU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Qiniu.dll

Files

Qiniu.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

/home/bachue/projects/csharp-sdk/src/Qiniu/obj/Debug/netstandard2.0/Qiniu.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 115KB - Virtual size: 114KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 948B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ