Pipelines[.]Sockets[.]Unofficial[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Pipelines.Sockets.Unofficial.dll
Size

163KB
MD5

68465039ff02bed7b09f46f789e51144
SHA1

362045bc70c56eeccd5d439f33e450939aff4c4c
SHA256

6bc11560e677219903c46d188e19606f57fa0394cfd9024c23721d516692dc0b
SHA512

347bdef1632188f7801d8f08b88e6831397b727c5a6f5c9319fa4b1315d5b92e1b5fd88295b0b999780fb50ca83cf2949a45052b7da95dc143e40c5dbe50619a
SSDEEP

3072:pJjgvbSWVsoZCQxe7pFkk4epmLstOYMyGoTFjwsnNc9ewS/:pJQbjso7SFkk4epmQtpBGa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Pipelines.Sockets.Unofficial.dll

Files

Pipelines.Sockets.Unofficial.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

Pipelines.Sockets.Unofficial.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 160KB - Virtual size: 160KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ