WebFormDesigner[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

WebFormDesigner.dll
Size

144KB
MD5

ec9c30b21ba4e6afa8d3eba679d8f690
SHA1

a451d2036cc451cb94c07deb32209928ecf56cba
SHA256

fc0e87343eae3abf8c7e1b5561330c27e488d3d3fb88472fdc6ecb78a33ecd61
SHA512

b3d4be3fd1738070fe9da854c31caef08b646ce54ff56c9d35fc1dea6069588d7f9adc294b1816e895f976e8125f8481a4831eb5dbfca350d2a054b7693e3e7d
SSDEEP

1536:7o3FrFtEAd+T8LY//ZlamPZBPQWp68pVJvcj2zAFmP0iWG4nYIHbRvlMbpw:MFtEAd+T8LYJlTrJ6ocoAFmP0iWGs3L

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
WebFormDesigner.dll

Files

WebFormDesigner.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

H:\DotNet\ERP7.NET\Hanson.Product.Erp7\OA\WebFormDesigner\obj\Release\WebFormDesigner.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 142KB - Virtual size: 142KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 984B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ