RessetTcpFramwork[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

RessetTcpFramwork.dll
Size

21KB
MD5

b29e4f1f15834d4de92330fcd6d4b3a8
SHA1

c7c9e6dab8cfb5cb08dd04525c74c1f76f8271d6
SHA256

6d0308c64b0ea822541b319b87483401e05f72ff81a5fcc16e38b9f02ffc8fe7
SHA512

a20f78d4337e0912292c9cf2e94a507fb292e9a1310a2b1fd233fd02b4284fda8eb2d237a7928885bbaa582deb07a04232bd0b1917d8c645b49d15aaa9be824f
SSDEEP

384:AxQRbZkq0Gk+9IBgrwELOn7ugTkswdIXTU5AkN9yb7KPeB2:nA/AdIXT87oUo2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
RessetTcpFramwork.dll

Files

RessetTcpFramwork.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\Users\resset\AppData\Local\Temp\vs2A48.tmp\x86\Debug\RessetTcpFramwork.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 952B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ