Cosmetx (2)[.]dll | Triage

Sharing

General

Target

Cosmetx (2).dll
Size

18KB
MD5

8a9e4181bb2747aab26a2dc5766ee979
SHA1

a708f59a20d74eb59306bcf61591d24a7b164110
SHA256

e3e7400e1fb948c681238b66d01aa2a834a1b6be98f22cea784937c2d09640d8
SHA512

cf81341a89053e3f17303192fc8e102e39e90956dd558898e3ac386e468e96fa58f48daf86bff77df28332f4ce53247680000cff5f897893a8d822b2c451ded8
SSDEEP

192:nG4Rz1dZyKwCzQwsm9kSUHxNkpUeT1ccuZth27LSej36tDHJpxqZ5kffbH0NK/L/:bHewCs7mer6tdqZ5WH0ML0VvKe0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Cosmetx (2).dll

Files

Cosmetx (2).dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\Users\Evelyn\source\repos\Cosmetx\Cosmetx\obj\Debug\Cosmetx.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 872B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ