WindowsBase[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

WindowsBase.dll
Size

1.2MB
MD5

14ae556ee28959a4df88088577251fc3
SHA1

2af555295cdaaa4ed97ace3e85271d8d552e5acb
SHA256

14ad95b7e32827e0ee6534f563c5b4ba4051a297676346af769391e666884e12
SHA512

0905f8fd88a763abe948f0f6f9c0a7ea91f36bc6b75657809c8004084e6ff92feecd22ba18c07bfb5964286978392394838424816b74962fcdfd55a4b73a9d5a
SSDEEP

12288:gaKQE/mT9aPufJdKkTzrfTaY5kIAqbtN/DCtkhkIj9Qfpx6Q+/Peyx6IN:liOsP+JdLDSAbjlj9Qhxk/2ygI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
WindowsBase.dll

Files

WindowsBase.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

WindowsBase.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 140KB - Virtual size: 137KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ