Sim[.]Docs[.]Util[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Sim.Docs.Util.dll
Size

90KB
MD5

d326e74749d7b180ffd174eea47ea9e9
SHA1

5e6af60b7455d084f8a01c9d2e9ba136fee2af52
SHA256

f7f96122582ca63439a96bd69d12304c4031318b17b0b9a01a834e8fb8d83619
SHA512

5f36b27e27a4b4459eff4c76f78d39878cbec49a92d1f73ae71dc6383e7c4164f20a6e899f64128db5fa672487661785d56dfcb30b080a13c4e5e2f23513eb38
SSDEEP

1536:+8SGUxIOhaY1E6FQ1UanuWeHlJr9vBD1nZ7Y8/RTF3pLdPhjIiMim/dA5SrW6Qyf:7axdZe6u9dCK/vloDKI0cOKZyupLbtaj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Sim.Docs.Util.dll

Files

Sim.Docs.Util.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\Projects\Sim.docs\Sim.Docs.Util\obj\Debug\Sim.Docs.Util.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 88KB - Virtual size: 88KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 808B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ