EPPlus[.]System[.]Drawing[.]dll | Triage

Sharing

General

Target

EPPlus.System.Drawing.dll
Size

7KB
MD5

ccb0d50db36173cd92b0d55003b764fa
SHA1

74f81ff72260bee6900b081df40f71a04a78ba22
SHA256

5569691855c19b689bb2657a3b21756bbbe0211bc6fa70c6bc16d3ef678d8e80
SHA512

d25e3b6f2a955a7a09302cc389ede7ae1031fc606716579720c44528692ca7dcecc9e60361652675f341ac52857e0a495036b71b7b9c070d0233f2afe0e42bb1
SSDEEP

96:A0HPZsqaaNl/bHEJIqahF/ZSpsA5QBgGJ+w6F+C2k1fd91qJKWATazj:HL4Wqc0QBgwzk1f9K/A+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
EPPlus.System.Drawing.dll

Files

EPPlus.System.Drawing.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\kod\EPPlusSoftware\EPPlus\src\EPPlus.System.Drawing\obj\Release\netstandard2.1\EPPlus.System.Drawing.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 916B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ