Message[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Message.dll
Size

531KB
MD5

e013bd80dddd2a5856aea89908db86ee
SHA1

49f27747a9f587313143e004fb51ecdd53e87bc4
SHA256

05728b65a4c3a1e87015f358e8ef02048604b8b56c19fdc32427055cff7cf60a
SHA512

042d8f4b6075621743065ddee6dfd2c89932da937d185bc69f282fa4af4c01b4a788da1d379a3d6f8ff53319c727b00d178f1f84b5777b6dc027dc414aa2953a
SSDEEP

6144:DR0RjWvu7hTyEz40rZNP9X63M/fh3r1xoajuDNA9yywl7St1KbnpH673Rt8EVbCt:Zvu9yEDZ9X63EZ6ZU1K56fV2qiRV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Message.dll

Files

Message.dll
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

ShowForm
SynAPP

Sections

CODE
Size: 447KB - Virtual size: 447KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 35KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ