Erp10[.]Mrp10[.]BLL[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Erp10.Mrp10.BLL.dll
Size

74KB
MD5

cb44ba6692274b44e984db19b1014b0e
SHA1

0fb8eaac084fd5df935038efa30dbdd9dcd433d6
SHA256

d25979dcc10a7239e96fb629b1d3035fad2802e681b06ee0a192ffe1ad9836c1
SHA512

a22317f6ed14cb2257a2d97f7a2995c0052d7427670aeb02c508a1e8e01729d949796b3609b6b172e8e1b256c7da488aaaeb3452d77f4561b184b0d925783f3a
SSDEEP

768:bmtYMjSAEyycuRl852gKejRX0nQL0dDzWI+zaRZ6EOb2zroRLHnwaeyKJQT3BtAt:ZMj1EHH852gvOQsWbg67Psjl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Erp10.Mrp10.BLL.dll

Files

Erp10.Mrp10.BLL.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

H:\DotNetXIZI200401\ERP10.NET\Hanson.Product.Erp10\Mrp10\Hanson.Product.Erp10.Mrp10.BLL\obj\Release\Erp10.Mrp10.BLL.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 72KB - Virtual size: 71KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ