SymexLoader[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

SymexLoader.dll
Size

851KB
MD5

fd76d8a85e532270d052c1b4c65a5793
SHA1

1f1f0a9970b7057055b8f7e2320d375ddd38a899
SHA256

78ac2853f41b0a930ac5ad6dbe1e686bcdfedcdf3481d58e7d4c614970fba7f1
SHA512

4e6cb1a163b6647c392e83b03ea48863057aa94c75b2fcb75c44c052f588416af68dab57c6ac658c56db4087c253eb72bc0a7f8b13f514eeb82ef3e16f459d8a
SSDEEP

24576:f/vbBjetDLNj/CNw/6dl8id1zBtRO6NUu1kKs//7/mDjx/4aGQuOcMNG83QVImvG:v1s/PZsU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SymexLoader.dll

Files

SymexLoader.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 557KB - Virtual size: 557KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 900B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.text
Size: 291KB - Virtual size: 291KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ