PowerPayable[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

PowerPayable.dll
Size

1.3MB
MD5

ac6d14bc2fb886787b5173caf6e7b969
SHA1

4b9890fee685afb1d8f9e111b3d40319d0e3266a
SHA256

e75f5aa577ba7c458976a5886050da116cc3f89a37515c2fcd63946584f9187d
SHA512

0d280acda1f610f469c0c06ae09e06e60e473140fac9c3644b8737ac0dae7cfec9cf8c6103afb0ab010fd686e288ba361e595a56217d82cc36c554af8e686c2a
SSDEEP

12288:1EX/qc5ZEWbjeVX/qc5ZEWbjewyX/qc5ZEWbjeyX/5ZEWepPuw/YaxuXrT/4t5XB:r1YaxinMB5t99ttp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
PowerPayable.dll

Files

PowerPayable.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 976B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ