d933498cd929c57aab0c3af908e0fe617213dd67c13e39b2a1d68b8f21849a7a[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d933498cd929c57aab0c3af908e0fe617213dd67c13e39b2a1d68b8f21849a7a.dll
Size

535KB
MD5

d0b5084c680c798b5340d2e61ca5e06c
SHA1

c4f4de6b77589a8d853f565c99def5dbfb230725
SHA256

d933498cd929c57aab0c3af908e0fe617213dd67c13e39b2a1d68b8f21849a7a
SHA512

e14e32d981f4926fe80a4c45d5dfcdcdc3b78dc63556ffbfb4dce61c2818e6aa2fd5bacc5734970bde017ac3fdcf0e24fabcc68c1c99c98a84095394e46391b5
SSDEEP

6144:YtkHq9BVYKH062PQHz0k4NbuI2Tt1QsEaVQQUzxmj8/lmQpnGGlsGdmACEhHkG5Y:YNpZZasEbJ0OnGGlNkuMHCzzdU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d933498cd929c57aab0c3af908e0fe617213dd67c13e39b2a1d68b8f21849a7a.dll

Files

d933498cd929c57aab0c3af908e0fe617213dd67c13e39b2a1d68b8f21849a7a.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\builds\cc\cwcontrol\Product\Core\obj\Release\net20\ScreenConnect.Core.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 533KB - Virtual size: 533KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 884B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ