Frame[.]Core[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Frame.Core.dll
Size

26KB
MD5

ffeea0d9bec88309b2033676d352a4e1
SHA1

2ab594b259c4a0eb56e658ce819347237db3f945
SHA256

b3d036543a08130476a2cb4cb677417b109dbde803ce605b37e9c32664596812
SHA512

78fedb356bb147867592657f0cac9d4e67a26ac4aa806dc96f12ba919e6808d0cc0c2d1a25eb8a6d67c36475b5a383ed18093fca00901d318224a8cfc5f09401
SSDEEP

384:sbqytrwECRZT5eBRpPbIGcufjEXlWAZ2+Uz+2iXgC95aBwJ7gfDVsZrMs1gyLtdt:xbpRZtuBcuf20MZUz+mCmBwJwyGegGr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Frame.Core.dll

Files

Frame.Core.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

d:\JBSoftProjects\CAMS\AJ_CAMS_NEW\Common\Frame.Core\obj\Debug\Frame.Core.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 872B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ