FlyTcpFramework[.]dll | Triage

Sharing

General

Target

FlyTcpFramework.dll
Size

146KB
MD5

b82fc530e0b989479dbcd9bca9e1f4a3
SHA1

4f7f974a1293114b2042caa500b82f283a26f963
SHA256

960da7b72f547a1802f139ce85f262820bc25ad503a712eccb67ef3cea264e9d
SHA512

24e94e42b1ca069292f81e553bb416f735c2a31c0f7e8924fa3d09101c3d30cf34f3c5f7b7dd82318f3a3bb4bb2466bc83538e98a749c1cf6d1a80164eed19bc
SSDEEP

3072:p3Gc50/ds4WILK76IsiSAureWInuRpVy+fDM4eS/wqvM:ZGUGduIe76dikr4uRpVy+sFqv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
FlyTcpFramework.dll

Files

FlyTcpFramework.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

FlyTcpFramework.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 143KB - Virtual size: 143KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 488B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 900B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ