tab_service[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

tab_service.dll
Size

2.4MB
MD5

fd6c9e2a4a55c8e92287e48420144b32
SHA1

d3661e4939748ec3896a8600fcfe104332d09df0
SHA256

d6fb96e1e6e8ca8b0fa194aadb3f560748d476e9948be76e32a2912690902ab6
SHA512

ad2e361bcc4250ebde05c72522451447b2743a580ab1d85af9488369c0cd3cb4e37f069cb3068041a4ba6012754e65764ed377e58004f584df5eaa2f81f51880
SSDEEP

49152:oFcoEuQa40wj0nkybJhqRWeHMCmq6DfsYuYNUFuiqt/84IskcjDZfkoaKz6ign+q:oFcBOhqRdHMCmq6DfsYuYNUFuiA/84IP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
tab_service.dll

Files

tab_service.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\Sviluppo\tab_service\obj\Release\tab_service.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 2.4MB - Virtual size: 2.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 904B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ