OTB_API_RESTful_ERP[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

OTB_API_RESTful_ERP.dll
Size

416KB
MD5

3e25cc2b901735da8d35074f346afceb
SHA1

cf4d55d933f470c1777996924a1a0550c10b7bb3
SHA256

7943075711f3fb1f728d414928a08b8e39695b753116051bd666bdd2b8b20802
SHA512

ca826a3efb9a68641d71b4bade979685d3bedfb5cafbac05369818c8212ddd9481480228ee94100fabd9104db5fedce8d189524c180b10eabbf146a7d804b870
SSDEEP

6144:WjtsWsGZy1rZP0WQgiJEum4fRsUZtnkZyN:WjtsWsGZy1rZPnd+XkZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
OTB_API_RESTful_ERP.dll

Files

OTB_API_RESTful_ERP.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\05.WEB_PROJECT\OTB\SMS\sms-api\V1.1\OMS_RESTful\obj\Debug\OTB_API_RESTful_ERP.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 414KB - Virtual size: 414KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1020B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ