Kingdee[.]KIS[.]MobWeb[.]Entity[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Kingdee.KIS.MobWeb.Entity.dll
Size

18KB
MD5

22ef7557ce6ae27b1c927145285ded2a
SHA1

e13965dedd362afaf9fd3db1048c17622db326c3
SHA256

b056f108f0febd301f1a1cd847e528e6753bf07cd6de2c96eaf14acfbce281dc
SHA512

60a6c29b8f3c879d7ed9515a4c44e010071f8b0f2f9ab22c6c30c62a21a68b75d6bf4281a6d4c7ec40a61a46cb249bbe0b4d454f1e230fea5f2f203248c7687c
SSDEEP

192:IFokcjy+ZzWBdtQuSmfTKJqf+QTjSP32z/skxkG+9AYdMsSRCauwHVjWhsPLL9X6:I1c+/Cqf+Qaf2z/rIwseeBl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Kingdee.KIS.MobWeb.Entity.dll

Files

Kingdee.KIS.MobWeb.Entity.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

W:\VSS\KISCode\KIS_SmartClient\移动云平台\04WebAPI服务器\Kingdee.KIS.MobWeb\Kingdee.KIS.MobWeb.Base\Kingdee.KIS.MobWeb.Entity\obj\Debug\Kingdee.KIS.MobWeb.Entity.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 968B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ