Topshelf[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Topshelf.dll
Size

184KB
MD5

ef31010894cfbf6c7942abdf72fc5273
SHA1

f29a5bf6c20b5ef1a1550bc18a57e956ce7739c4
SHA256

19952cf3644bae2e9dc6101fdbc803edc089744179d367456d64b7d1eb501d4c
SHA512

262dec49e93cca2a8f48090ebac928b50d9384170196f022f57e487cf8a62de9e100fa168a5d52d70fb80bf8a1331486045fd82302e1f87248905551f5ccc494
SSDEEP

3072:l6zSOZqTIMn3CXPD+CaL5Hr2wg7TngGHKyOifVLv:lL3C5Kix7TngGHZOif

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Topshelf.dll

Files

Topshelf.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\projects\topshelf\src\Topshelf\obj\Release\net452\Topshelf.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 181KB - Virtual size: 180KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ