GB-lesson-forms[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

GB-lesson-forms.dll
Size

70KB
MD5

7fa95c2554a74e0805581e20305069d8
SHA1

aa77eebba993f3e79b4971f5c135286e40b066a1
SHA256

7a4b1c2b3a236bc7cac25c9aa07163d9eb19233065e88b7304ce6e46c6a36e0f
SHA512

aa4a24d58f008d5b2c3bff7798a75fcb27f6ed145e315b2e90c7503c685340bd15c82081f383614d5e7d79c7a02848208eab0eda2fc78bf3302241995d9a1f7e
SSDEEP

768:ZPTaoFDaqKkUESuNf/x7vHTV16S18fsnkKAm44eQcgr+7U2B2gZUd8Y51IZGTMhJ:ZTaqDaqKZbuNjq4NcgT2Rw1IeMhVix6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
GB-lesson-forms.dll

Files

GB-lesson-forms.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ