AbsTools[.]LoginNmSpace[.]dll | Triage

Sharing

General

Target

AbsTools.LoginNmSpace.dll
Size

16KB
MD5

3f2fe1c81d1d3a7f37bc14dc3f50d8d2
SHA1

d97df3556ae3c080468cef2cce877ef4da01fa2d
SHA256

56d0d031ce5074246242f3d8caf0159f4cedea9a361669952a912af39262108c
SHA512

a7d4a5538dbb721bcfbecb9e6ab3084a7afc512aa669c64ac9232d77fd5af2d2f432fe9dc94a49cccecd6594749e4e4584c49e2158842deddd7520a802850307
SSDEEP

48:6R/5fqRT3tLrjY59qn+bRkLKeJl75konICHdlJduJs4V2Px7e+Nt7GKva6b4lAbv:85wT3hc59q0RCKU75B14cxdIR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
AbsTools.LoginNmSpace.dll

Files

AbsTools.LoginNmSpace.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\Project C#.NET\Prj\AbsTools.LoginNmSpace\AbsTools.LoginNmSpace\obj\Release\AbsTools.LoginNmSpace.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ