ImeLib[.]dll | Triage™

General

Target
ImeLib.dll
Size 14KB
Sample240527-n8cpysca49
SHA256 c84100d770c4145d5d85b51b0b4a6d1e76941645fb6018f5a91c05577050afa9
MD5 a84e85a33dc51d13b0db7083c92c9c23
SHA1 d1dfaac6352ded00f9460f7711af0918c2ca6fe8
SHA512 575d7977c1f02edb4b2c3a2c2810fad3cfdb03ff4171cd4460f7f185dec5faf6b552fdbbb6cdae1e5357bc91a54a788f10a3203249cf94296efe0a18d3cff2e2
SSDEEP 192:GMMMMhbwkVhdDyqrwgDC8qEGQtXm3R2taBj/qVOI6+wZ7PuKCZT9vz0YpkMJ6V:GnhkydxDWYXm38t4bI67zuKC7vzViH
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ImeLib.dll

File Explorer

ImeLib.dll

.dll 14KB

ImeLib.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 c84100d770c4145d5d85b51b0b4a6d1e76941645fb6018f5a91c05577050afa9
MD5 a84e85a33dc51d13b0db7083c92c9c23
SHA1 d1dfaac6352ded00f9460f7711af0918c2ca6fe8
SHA512 575d7977c1f02edb4b2c3a2c2810fad3cfdb03ff4171cd4460f7f185dec5faf6b552fdbbb6cdae1e5357bc91a54a788f10a3203249cf94296efe0a18d3cff2e2
SSDEEP 192:GMMMMhbwkVhdDyqrwgDC8qEGQtXm3R2taBj/qVOI6+wZ7PuKCZT9vz0YpkMJ6V:GnhkydxDWYXm38t4bI67zuKC7vzViH
MD5 SHA1 SHA512 SSDEEP

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

20782

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

d:\GoodChief\ImeLib\obj\Debug\ImeLib.pdb

ImeLib.dll

mscoree

dotnet

Sharing

General

Malware Config

Signatures

File Explorer

ImeLib.dll

mscoree

dotnet