LdProdDal[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

LdProdDal.dll
Size

602KB
MD5

b1131c006ab618454092af4996ba22ed
SHA1

218b1cf0752150151a91f70a25efa7d8686474a0
SHA256

452ae15ad5b41091e557eb8843a480f2141a755d9aa612a8a121bcbbbc2e8c11
SHA512

082d9a83a96d9e7bf5ba11756b4b73a7dd4483343e3ea0e3117b8183ddf0627d39049fdc7ff1dc647c42cfe807f35dd78b85d55b2f602814a4a357978cfa1146
SSDEEP

6144:jPWFv1S7hYIlA02cH28BI8kISfZoOQ0x5kLf+DutliZ/wJPhX38kLERjRTW+/J2H:jPWe7hYIH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
LdProdDal.dll

Files

LdProdDal.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

F:\Ldsoftware\LdMES-HZ\LdMES\LdProd\LdProdDal\obj\Debug\LdProdDal.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 600KB - Virtual size: 600KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 888B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ