Heal (1)[.]dll | Triage

Sharing

General

Target

Heal (1).dll
Size

4.3MB
MD5

df24bcea7dda1c08d34cb61cca74af30
SHA1

56e2cd30f58eb4c4a1c3728b1f08317162bc44f0
SHA256

4f1fcb9ef3830ea61426d17c6156cb581538474ae63c4ff15e93fcf5d6e95071
SHA512

fd594ab240a827fb743e04ded8582038834e1e52d0b80bdcd1eb508d770b8e663c06e0180cc173b4dc8d46bf7c9a730266343e1173ab036971034884edc2b23a
SSDEEP

49152:uzbpJjuDzpnWZDvhdZN5ZpvkBNYLal+LgIADostHjW4xTv1V:EbwYtZNvp8zYLgMkHHTT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Heal (1).dll

Files

Heal (1).dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 4.3MB - Virtual size: 4.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 908B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ