WalkSim[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

WalkSim.dll
Size

134KB
MD5

eed7ade7c97c96971b2d83426cde2392
SHA1

e616ec1fa3089cc65b35a6339a70c32fb332e4be
SHA256

797734155553da144a2e25edbf253fc6d6d3d02fa7f9beacdcddb7e4ae8082d7
SHA512

ab3683f42e65ee749b446503398b77fd29b97e1c2abaf69f0f997d747ae74d3fc48110183c5fe27c114a20cd37f895badfcb2af4c6a2b4874406023e310f4af6
SSDEEP

3072:/4YmgEHoNV8jM0R5WScidv0UZ4te9DoaYCDf8wOC:/VEHaV8j/GScQsk4te9DoEg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
WalkSim.dll

Files

WalkSim.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 132KB - Virtual size: 132KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 772B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ