EncDll[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

EncDll.dll
Size

28KB
MD5

5a9ece853305022172ea59f17802bca4
SHA1

f87478ab4501f5faa05c29e459fef6a815f53c41
SHA256

9562ad2c173b107a2baa7a4986825b52e881a935deb4356bf8b80b1ec6d41c53
SHA512

502d07946047855b1e38c7d50eb060af80cd5942d994dbacf9615246780aed4e4e064c0ee959adda330ed828cd076c33be073072503d89a3ba37412afae702a3
SSDEEP

384:tAecNJmQYCPhTIZLhd/Oqh+DhDrvjc63J7j6YtEbujI9UqA0N/3HTDY:txcNJmHL9zmf5v6MOoI9UqA0JHHY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
EncDll.dll

Files

EncDll.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\Users\user\Desktop\msdll\encdll\EncDll\obj\Release\EncDll.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 872B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ