WxPayAPI[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

WxPayAPI.dll
Size

45KB
MD5

c8cc76ab6ad1faac06a56636ee8d81ee
SHA1

a4660a9fe933e747a8fba3b6910f8ad7130f561b
SHA256

eba08d4632dc9c5fbf2a76bb3bb4d389c98b8f619d827becc9dba727f8ecff36
SHA512

71f4c78a606dabcd5666180de689a212d8817cbb35a42f2dea0149cd7a0e3c4f8fca17f838b86178cbb28a8e8ad07ab74dfb0b94347b74246f70c2cfbf66be43
SSDEEP

768:uJJI3IQQDfzdHmhzaFpaWO4XcTEhKko7RU7nRfrZneHyt34yEjAAaJ:uJJI3IQQDfokFpagNno7RunRfrZneHyh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
WxPayAPI.dll

Files

WxPayAPI.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

/Users/linyi/work_wxg/wxpay-sdk-donet/WxPayAPI_CS_v3/WxPayAPI/WxPayAPI/obj/Debug/WxPayAPI.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 43KB - Virtual size: 42KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 880B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ