Serotonin[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Serotonin.dll
Size

3.3MB
MD5

1d4adabc2941fdfa3a2d44c661764942
SHA1

a12849e877a79d7c063dd750033e1dfdf1bb15a5
SHA256

cc3dcc861aaaa6d0537d1f0526eee3c096c535b9d54e9511c9d2733572aed2e7
SHA512

772505486e3ec7a3f5be8b888797e4a091c417483fb132414bea3c4ff8056dedba68187c0df12ac097ddd75a4de5005df5856e5199648c5b3a22589d81675b69
SSDEEP

12288:1Nr3EKhXIebJ3K+jA6HstY45b8dtOJKusY2vFxex1DwTLQP9VnaxsfUG4ATPa2rs:1Nr3hhn8Xay8dFSDwTLQPdUkTPanrLt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Serotonin.dll

Files

Serotonin.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 3.3MB - Virtual size: 3.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 852B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ