AbsTools[.]CSUI[.]dll | Triage

Sharing

General

Target

AbsTools.CSUI.dll
Size

948KB
MD5

93ab57492444ae56a8054f60fea93962
SHA1

fb6d239ce98f0e1a8029255781a78856f85e7dc5
SHA256

a1877a44da1e58179fc7d536c38517e1589fda4278d81928a772dc0f29d67c07
SHA512

2fa4081a8c5b98186e683a6c8153f8c32b04f628907a80be3fa4cb885042f5012d9cb825cc448774f4f8a79703e237323b6ab26b21f33acfcd211c847c1b251b
SSDEEP

12288:ZF6ZF4rEXFlj5hKssiKDmgu8sWmjDqzCkb2VkwPldNV:b6ZF4AXFlDzBR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
AbsTools.CSUI.dll

Files

AbsTools.CSUI.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 936KB - Virtual size: 935KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ