Winsock2005DLL[.]dll | Triage

Sharing

General

Target

Winsock2005DLL.dll
Size

56KB
MD5

605c51709181ce8f5730658c82feae83
SHA1

0befe9bbd8c50ca9ed66ad99f34ad5a22085db9f
SHA256

ba56064b9368354d8450c921b011b1a19173e608bb87c9740a1e8f365b662a91
SHA512

897d693d0680c919b8fa4753acc8e4175c7403b88494a197d8885f04b72ae4405eec094a4a5fd26e8f8539f9b014c82ddf733db440f0e793346b886f5dd69c06
SSDEEP

384:ShgoZqsrOrl/8TlGLYhOzx8EJXCq/tIAVj5F3evNCGKekpOQ5nKLtR86phqNp3S6:KZ7P5GEKSCGKekpOWStG6psCumrct

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Winsock2005DLL.dll

Files

Winsock2005DLL.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\Users\kolkmac\Documents\Visual Studio\Projects\Winsock2005\Winsock2005DLL\obj\Debug\Winsock2005DLL.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 40KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 4KB - Virtual size: 158B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ