AbsTools[.]Translate[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

AbsTools.Translate.dll
Size

28KB
MD5

f051e655fca6c94a65fbdf3b349c0eec
SHA1

f91575e946ed876c3bc26c549fd5ed6983e3d2ff
SHA256

70421322b73dbf57cf17665f885b6b5a57401d0dc086c9330254874eba71f01a
SHA512

d4399227fc6db442eca21d8fe13550d0d47b6e4f1204480d32199ea74b0776996c17c8e5f2309740ebd6b0fcba3d7884c5636da144ab486b1051615758886d85
SSDEEP

192:w5KAhF9UEIvTHZVpVnlYJL/erNI7cjFLROOEtiRJM5VqkIq:OKwIv1ryqhwcZLRkiRJjkj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
AbsTools.Translate.dll

Files

AbsTools.Translate.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\Prj\BHU.2005\AbsTools.Translate\obj\Release\AbsTools.Translate.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 4KB - Virtual size: 122B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ