ACS_Parking[.]BLL[.]dll | Triage

Sharing

General

Target

ACS_Parking.BLL.dll
Size

400KB
MD5

09420f807fd3551354edfe4c4859c4bc
SHA1

083aba65d1f9150dc11503ed45c2bb0964bd43a8
SHA256

a7327858c68e580d18f7210edf385893e2121271f44f4415343021c67d58a1ed
SHA512

f00992e1f0f7b171e582bb5da79d24738f19535317dcb2c8438be43dc4e66995ef808a6c114b4e7a1bc5c8fc5c9adb0ac051ebf4ac21a51c295b33ccb5e0133f
SSDEEP

6144:GOYhPXjs2VLyWWbH8z74Lbd4YY1q1fYZEAHQWpmKFFc1:GvVXjs2m8zCFY1q1fYZvHQWprc1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ACS_Parking.BLL.dll

Files

ACS_Parking.BLL.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\jenkins01\workspace\ACS4.0\ACS_V4.2.7_2\BLL\obj\Debug\ACS_Parking.BLL.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 388KB - Virtual size: 384KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 1012B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ