Veylib[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Veylib.dll
Size

70KB
MD5

3552d418ce6394cdd9fc0fb06b883013
SHA1

52bbcb19cd100abbd261a4b4204dcec8c60e9646
SHA256

0a87fede388ea48d2f21452058a40982a46d1601f9f7c6b1080b983078a59742
SHA512

57d05e1f6c17efb54b5e5a8dc62b6a872b4fe7cb77c8f5f40a355a609b441cab615942961be006a7226486e41797669e309b34354d6d81d7a950a0459ab868ea
SSDEEP

1536:tpjlegbx3JZIOztGqiwuxf4Qo5AvK/bUyCaTS:7jldxztGqiXf4Q9C/bUyCaTS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Veylib.dll

Files

Veylib.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\.Code\C#\Veylib\Veylib\obj\Release\Veylib.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 872B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ