Hanson[.]Tools[.]SetupInitFiles[.]dll | Triage

Sharing

General

Target

Hanson.Tools.SetupInitFiles.dll
Size

6KB
MD5

f11a4b23649f60e7fe4a8fa2c72358bb
SHA1

6f00cbc088e21b185ff4f6fc6a566e7ba78bf765
SHA256

f267b6b61eef274c5426d9286c53bd5b952ee92944263ceac63c2c57f421c0df
SHA512

e761e61a86418bcbe98f4b3069cf7b781843203fd77aea2e0b9ce58cf33c8de2542118731cf318bb58b4a67f46ead6fb0d518d8f57c852e6cd053202fe74d735
SSDEEP

96:fMjpj6Fl2QPP70lyHzalazVtL2TYWfQIbw5K0y:0VqwoP7zalazV6YWfPw5K0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Hanson.Tools.SetupInitFiles.dll

Files

Hanson.Tools.SetupInitFiles.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

H:\DotNet\ERP7.NET\Erp7.NETSetup\SetupInitFiles\obj\Release\Hanson.Tools.SetupInitFiles.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 920B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ