AbsTools[.]Utils[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

AbsTools.Utils.dll
Size

20KB
MD5

4049ab6989d3cea8890f96a24147a409
SHA1

e2f5686cd4f9d1153b69511801bc345c54c8f025
SHA256

41f89b43222da12382a54634289bff0a8e86915eb85e220db295570265a8e1eb
SHA512

bf1480fe63e9ac31cb4e4ee95372f564f216dbca151c2b5787f8c35088c56b885f2ebb6e5d7fb8676f56e2d4fcea06997022797962a8e70f685c5e0459b6f681
SSDEEP

96:LUkZH8vkNB8tRu+HIKLLK4Af0MEEu24vjJPdwWE+fRb+HrPVliLw:LU6cq8tRuqIKLLKnA3JVwWdfEPVf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
AbsTools.Utils.dll

Files

AbsTools.Utils.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\Project C#.NET\Prj\AbsTools.Utils\AbsTools.Utils\obj\Release\AbsTools.Utils.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ