LabFusion[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

LabFusion.dll
Size

6.0MB
MD5

fa3256e0515a8f80d98d96dc13ddff0f
SHA1

91835fd08bdd2eafd4677b3043ab2af0ded5da54
SHA256

06510b776d38c21249c3cc4861b54b83c17b02e1665a01e6a0df711df9974d56
SHA512

d4055efa1a28b03cbcabdcd51fdcec61c259c7bd05fc27765e309e47521b72f824600702fbfa700a0e008bb3f7f756d5913b8d3df22d5a7da7fbe101729f66aa
SSDEEP

98304:LbWTfnRvDMj0h+cEO9eziLv5VgO0XairkA2HuLIDTXb0K:LbWTNk00cEOFjgOIRN8TQK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
LabFusion.dll

Files

LabFusion.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

E:\Users\dwood\Downloads\BONELAB-Fusion-patch-4\LabFusion\obj\Debug\net6.0\LabFusion.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 6.0MB - Virtual size: 6.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 688B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ