Utilla (4)[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Utilla (4).dll
Size

301KB
MD5

12be4609413673e6b16b811c0e410dea
SHA1

4fb6be8027808bf056f802637c81b33b71a76354
SHA256

2a4d9011a1235217b6e8f94f2b63e5bb97aef4ba514dbd15895a5ae4724391e8
SHA512

34e6eac1da1ea9c2d3c47dcbc97b7673feb9810eb798fc264415c981d6d3af497ba73ea8841393ea9ac8796f2441ccc218c955fed63c773e5186c06f6c9ab0bb
SSDEEP

6144:fQVRDg1Ei6m2u5m7tnvK7Us/ZPbXhWCY:fQVRzvu5mx+ZphNY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Utilla (4).dll

Files

Utilla (4).dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 299KB - Virtual size: 299KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 772B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ