Erp10[.]WebService[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Erp10.WebService.dll
Size

38KB
MD5

19dbc3cb3154ea88dbaca9d4c952ea21
SHA1

d999bea78b4115c62cf4bdeff40ad7eb92bf3621
SHA256

1e729827a2af0071cf38b48d34f7506fc673c8041906b37bcf56470fdee534b8
SHA512

384536507aa06521dd538a18213ee1812d41c3ac6dc2b2a3c2c91438a91d094cec2aa52a6edc42173658fdaab85ae4f81d5e04178bf7e0e57cf2f1f8477d5982
SSDEEP

768:LewaUel8qTdisEs8jYfZcrUHxPUmCfKCn4D8WcPQeQWy6j6:Ql8qTwshhdHvj8WcPQeQWTj6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Erp10.WebService.dll

Files

Erp10.WebService.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

H:\DotNetXIZI200401\ERP10.NET\Hanson.Product.Erp10.WebService\obj\Release\Erp10.WebService.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ