ACS_Parking[.]IDAL[.]dll | Triage

Sharing

General

Target

ACS_Parking.IDAL.dll
Size

60KB
MD5

2a6b0b24f78cb6c095980840e2f0ff58
SHA1

3f315cab0fd02f5a6836ecb26d9ec1bd6bbf0def
SHA256

1b21da20c9f62c20a955616d87b293fd5df352d4f93b2814e93e0e88f42a52bc
SHA512

ed6e3ed10d6595014b27b384c2f0e0d3c383466672bcb5d65bb0f1443cd302e92cb8a17e826f4f47b1d9254f3b92b1b7524b6a25a905a2f05304ae6af8a9ba3e
SSDEEP

768:SoZSl6f4ks1+llDkaa7jUbfrB8zYCTGU7eMD4M7p5ma+lh2AheD/cxT:f4RKtknjuMD4aDKh2VcxT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ACS_Parking.IDAL.dll

Files

ACS_Parking.IDAL.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\jenkins01\workspace\ACS4.0\ACS_V4.2.3_2\IDAL\obj\Debug\ACS_Parking.IDAL.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 1020B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ