PowerInstaller[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

PowerInstaller.dll
Size

8KB
MD5

690684ef99df1cca2db40b33963cd545
SHA1

a1b9a32f98c3381422ad0377f609f99457d2e847
SHA256

d4e12dbc96620e74ac126102277cec82d543eec4c8414528a9850eebb5484cd7
SHA512

85290190845d7ec87c43f0550ca60c4ccb0370245e95178f9cca2d130ee8cf2e505073e7aeaaea39ef439cea40524de499ea8c0149d959d3396a435e53028831
SSDEEP

192:DFlPpaW8wgZIzlcpywNazMs3ZYf5sGJbqQ:DFlBzsZGlcp5Na4s6WS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
PowerInstaller.dll

Files

PowerInstaller.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 872B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ