Microsoft[.]Practices[.]ObjectBuilder[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Microsoft.Practices.ObjectBuilder.dll
Size

60KB
MD5

27d7172d43f50611cc472b78a0375fdc
SHA1

66f11c1eb69530bf815f2c71d0edf27ed32c0dc7
SHA256

ca1b8b738d2954e3c90f1c9cb7c87a4c85d4a1459305734634d6c73f80e2fe75
SHA512

dc0e384f49c4627c2661228fb3e63a3b1d706e6de1e91fd926496414c8b502e77c3d34825e55e23acafa0c78ee16ec99a84724c7efa882130f0da4e4c5a11a76
SSDEEP

768:4Ez/E8ALnlgp3/KWkIGoN362AGYhzXcT6UeJodyGfwh0:llALnCp3/KWknK362AGYhzXs6qjU0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Microsoft.Practices.ObjectBuilder.dll

Files

Microsoft.Practices.ObjectBuilder.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\Program Files\Microsoft Composite UI App Block\CSharp\Source\ObjectBuilder\obj\Debug\Microsoft.Practices.ObjectBuilder.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 48KB - Virtual size: 46KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ