USCIS[.]CLAIMS3[.]Devices1[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

USCIS.CLAIMS3.Devices1.dll
Size

46KB
MD5

75110a74b157dd4bb859e96dcda41812
SHA1

83b348cdf50f4b5220338e214a86503a447da47c
SHA256

6e482951a6d5a159b99c1af19cf55428ffe115479dac94c4d9df9aecd72024b2
SHA512

e17c14170883d7eb184a1ab5ffed02326d3125f95aab6524e72f3ffd0c1eed46d37f0e549f90ec6affbaf04413f3ea41f577c057fb02b0a4543ecd47c3341bb7
SSDEEP

768:Koc6n+/GxYvhKYnavPC82Qul/4O/UcrX+98HZxgKQ8dnuRPx2kDgCxsVpq7OOb5x:hxYgYnavPC8jaAOJXk8BMRIgsi1FrrLn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
USCIS.CLAIMS3.Devices1.dll

Files

USCIS.CLAIMS3.Devices1.dll
.dll windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\Github\claims3\Source\Core\Devices\USCIS.CLAIMS3.Devices\obj\x64\Debug\USCIS.CLAIMS3.Devices.pdb

Sections

.text
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ