DashboardWcfLive[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

DashboardWcfLive.dll
Size

2.5MB
MD5

be948ac396f31ed1d9a4c6733e13c92c
SHA1

2016742154f8712855f847b4858ce5dc6b2de6b9
SHA256

0231fd44675dd7296d44f313237db1ede7995ecf576f89f9695e6a6430453d5c
SHA512

d0b4fd67c5132b1e6c3220f30510286a57a30b28f86e0a7e0789b7dedf833a5954375031588587a39a151efec06094c768a3a7f8a8f8b308f7b4d70075795815
SSDEEP

49152:Yjz2W4aULWzhJKVQdK999QzqN0XuBQl7E0vy:ilE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
DashboardWcfLive.dll

Files

DashboardWcfLive.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

e:\Ballistis - Git\Ballistix DIS 19March18\DashboardWcfLive\obj\Release\DashboardWcfLive.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 2.5MB - Virtual size: 2.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 840B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ