Hanson[.]Data[.]dll | Triage

Sharing

General

Target

Hanson.Data.dll
Size

56KB
MD5

8e529b460599f88b3a5b54f221bb5956
SHA1

2d935ee39714f50ffd1f83687b2391f3f3f67631
SHA256

b4dd0d43264e7558e73e5fea511693602cfb18427453929e473d86d193031675
SHA512

2f591974ddc3d544aba2f1cd5d92b7d09e364d68b4c2ad2cd3d989e84fbb7780d7def7c881327a7499d93fc71d16078565cc6ddba5d8d4526c1c3ffcf6c06c4f
SSDEEP

768:Bhcb/gJ+HeVf+lGBP+NLx1kw69vLa0YksIM9RkEKM1LvolV+cDm0yd1:y/gKe8sBP+/1h68JR1bolHm0yd1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Hanson.Data.dll

Files

Hanson.Data.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

H:\DotNet\HansonFramework\Hanson.Data\obj\Release\Hanson.Data.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 54KB - Virtual size: 53KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 976B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ