ACS_Parking[.]DBUtility[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ACS_Parking.DBUtility.dll
Size

72KB
MD5

902e669aeb5d10eccd7a650af9c1ef15
SHA1

28e744ba7919f4e2ac7b18ec6556c9aa77a5fe86
SHA256

d53223199c99adfb5b97b76badc255d556b8c813d9923be12fa08e6d4ccace94
SHA512

971c279db997ef8daed386ded56775286085b4d3e1078943506fefe7a9b570d0989f99d9b189cafcd86ec12539c863148e17703cfa9985aaf486dcef6d7703c8
SSDEEP

1536:XSZGaLB6/zjF9MsDZswh3D/Li/lLlzaoj7vcuuqt3F:sabkjQqj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ACS_Parking.DBUtility.dll

Files

ACS_Parking.DBUtility.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\jenkins01\workspace\ACS4.0\ACS_V4.2.7_2\DBUtility\obj\Debug\ACS_Parking.DBUtility.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 60KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 1004B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ