Erp10[.]Share10[.]BLL[.]dll | Triage

Sharing

General

Target

Erp10.Share10.BLL.dll
Size

63KB
MD5

e06f76de2b8d9f8beaf7f977561eb5ab
SHA1

7c3ca32e9d461d5752664a9445dc7562bdc3be46
SHA256

c0c2c76c18fabf1f366013359e4cbfaa1241fd74b9c3bbe70861f60ee10f6893
SHA512

d5b1ed5da456301da4ce1dd09aedb5e5e0815c08e507a6de45878aa38198cb41b43032d71f2a8dccec0dda6d3edc73832e5fcc7e9c4fd1ea18d9d4f2ea56583f
SSDEEP

768:Ji3DyZD+E6Ti39hltsTi3ZtI8yKxYljWrzXHO+NE21rzcH2aXlhot9C/oD7XpkL4:Ji3ugi3yi3B53XHLNclhS99po+hJLP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Erp10.Share10.BLL.dll

Files

Erp10.Share10.BLL.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

H:\DotNetXIZI200401\ERP10.NET\Hanson.Product.Erp10.Share\Hanson.Product.Erp10.Share10.BLL\obj\Release\Erp10.Share10.BLL.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ