Boying[.]TiananCrawl[.]IService[.]dll | Triage

Sharing

General

Target

Boying.TiananCrawl.IService.dll
Size

82KB
MD5

4f617d185258203c813df3add0b860b4
SHA1

8df55a85cf69ba0294b22e645b415d4f7c20985e
SHA256

811c189666e0de0234bdd1987cd81029b01f4067f8c0281fdecb8fbc040b2b1a
SHA512

a1d7f8ad5f3cac4c510ce26df96a7a27eea0685b91e0d0e9f86c81bf3bfa5f86dc8514e67927721ec9d7ca9aa68512636e36b3170160a4a1c76b706cf1acafb7
SSDEEP

1536:KpzanpFuaxxKbo2OPxmGll9GwnoyFGwcqPct7fh:npFhxL1vLDVPctDh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Boying.TiananCrawl.IService.dll

Files

Boying.TiananCrawl.IService.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

E:\WorkPlace\Realse\InsuranceCore\Boying.TiananCrawl\Boying.TiananCrawl.IService\obj\Debug\Boying.TiananCrawl.IService.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 79KB - Virtual size: 79KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ