TidalAPI[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

TidalAPI.dll
Size

138KB
MD5

fd9175d7f49ace579a8b0610cb090174
SHA1

cc5f4c9dd59ea3bc09bec4cb8ec27552f09a854c
SHA256

2cdeb6857de781c0d66e22f1e2fb0f0432afc3f79f0705c841da27a6de7c8d1d
SHA512

c85598755a4ca219fe97310232193807ac8f56676d07515e137748f0174b0e0ab202a21f3b00842a90f2b8c7d884403f1384d0a596c42c9eb18549a9dc60fa15
SSDEEP

3072:mqDCd+7VAszSUjyKJ3Yqj0iemPHxEjI4PjId:m+ACu+Yqj0iemPHxEjI4PU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
TidalAPI.dll

Files

TidalAPI.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

(S WCP
Size: 56KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 78KB - Virtual size: 78KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 792B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ