Assembly-CSharp-firstpass[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Assembly-CSharp-firstpass.dll
Size

511KB
MD5

7b79c2501662b0da50320fe20cfd5235
SHA1

72670e7695d10a6173f621c1bfd808acf7cc047d
SHA256

2aa410f1e6b2d3be1caee1d6910e68d0a286abdc42f5e74a9cc147278332b311
SHA512

460d3dd2c270a5510e2157e4f4ee63660c1ab6298025ff8acf1d787973f3963d83b860b8d5ed0743a5d9a361305dc2b4aed7e788b0c93b9987288672ad1ae784
SSDEEP

6144:Yty0UEJY64eDSRoOHZxqiAXr1Ze/4hpBnb1UKwZUOu4kw0JtIKDkZrCIM7Hv:cZUEX4spimJs4Wew0JhImIM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Assembly-CSharp-firstpass.dll

Files

Assembly-CSharp-firstpass.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\Users\shinya.tagawa\Desktop\GitFiles\From\DXApp\Temp\Assembly-CSharp-firstpass.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 509KB - Virtual size: 509KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 744B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ