Tyrone[.]dll | Triage

Sharing

General

Target

Tyrone.dll
Size

3.4MB
MD5

5289d05b6525f474898a5541ff32adfd
SHA1

7a3d784e4f737786b54a177c80275a91ee7076c2
SHA256

30d27ff95354ee56096e7f06f5eb0f64d895c996f6ff8e45c781f1c14b542373
SHA512

1a06e5c4eee0097d9795a8dbfb866e0db0427a9b01c28f1a7035f4d854a05e802a832b4f30f2e608b36231f1ad5fb68637ca3d108ef330d55059080b751d7075
SSDEEP

98304:Uv98fGTl6Cy5XAtd9D+5p4w0GE7aGtUM:Uv92R5X+FBIGtT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Tyrone.dll

Files

Tyrone.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 3.4MB - Virtual size: 3.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 876B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ