iDyn[.]CLibrary[.]dll | Triage

Sharing

General

Target

iDyn.CLibrary.dll
Size

142KB
MD5

891c0d815597a6373e1f8b6cbe20575d
SHA1

69ccb579b869ed399ae1502490b37555ec5317f7
SHA256

9aa456c3e587e674edd9e0f680162c924e0bc2ce714b75e245347ffa8951e13a
SHA512

aee60eff459caddc2b2bcd0566f0873b3545ba984190a22233d3c539a75167285fa9f1080a767bee4126a113dca8760dc470951d53fc8edd9dbae17bf1610d57
SSDEEP

1536:6C9lhyThwABRHxTkMAVuWytNwwV3uAUvT15I1B3l/40rgZpt049n8xsJoEJ:1MhwABRHhWuWvw+eZ40UZptiCJoE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
iDyn.CLibrary.dll

Files

iDyn.CLibrary.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\Users\Jose Luis Acacio\Documents\Visual Studio 2017\BitBucket\idyn.solution\Backend\Librerias\VB.NET\iDyn.CLibrary\obj\Debug\iDyn.CLibrary.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 140KB - Virtual size: 140KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 920B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ