PowerQueryForms[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

PowerQueryForms.dll
Size

343KB
MD5

b6c88bf7255caf48c5b10429a2d6b840
SHA1

c25307acefffdb7071ff6e07d74fc3d14e2ee6a8
SHA256

9ae5ee47293638b324a3d6ccfbbf82ef2f9c4bd2d66367b45c592181e6530dda
SHA512

88556040cab38e8d128a3c12bfbfdc0c224f0a0d3af5e6c1d1a7a67828def6993a272d5182c01dddfb4d429d1312087b4fd1c62ed7e9f85db0b7b2008c7489a3
SSDEEP

3072:EHiq3M+JNItE4nNIytC0Cv/Xah9QfHfErxQa3JEOilnn4vzutjOyXh3Q4TBuOlvJ:MiqNwY/wStrh3Q4TVw8jSlM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
PowerQueryForms.dll

Files

PowerQueryForms.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 341KB - Virtual size: 340KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1016B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ