LoginCtrl[.]phis[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

LoginCtrl.phis.dll
Size

468KB
MD5

127712cab6cfdc0fbb9a94b5ce6b38e1
SHA1

f79b7fed0f687acd67fa93f02d9b382e18cef234
SHA256

842ea0328b744b0d8fffe28a94daccd7cbce4ebebbe467105717b791fe38a122
SHA512

16d053278dd8573ba6a4d662d9ad0c55b4a897fe4817fc72dd2b9fa666c191c777d75a725bc5a466ee7c51dee790798a9a048b073be9a9136a9a751f64a82eb0
SSDEEP

12288:4dCStcCLV3VSz5vyDK03ZG0X0IiPSE5y8CPL:cfbA5SJG9NPSE5jO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
LoginCtrl.phis.dll

Files

LoginCtrl.phis.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\Project C#.NET\Prj\LoginCtrl2\obj\Release\LoginCtrl.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 456KB - Virtual size: 452KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ