Erp7[.]Mrp7[.]BLL[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Erp7.Mrp7.BLL.dll
Size

1.2MB
MD5

4bde34f69987940f3ecba4b9fa31e293
SHA1

c485c454343005fcc4cbfb6db1ad99f49bcb300b
SHA256

b49b169ac9a061f6564aa0462efd1bda53d02b010be2cb92831d2950889c8adc
SHA512

f3c0c098a72988a0edf1ebe82058ff4ec250dcd18b1685777c66c1197d04681cbf95fd6cf3880cf20ce43afaaee694f2ff852d41d0be0ae952292b2a99699eb3
SSDEEP

6144:1K8/oTYtofqIU5mGOjmGOTOe2uQI1YodYcxib5J3aXqOL7Nauqu6fxF6ZDd0RTtZ:0YtKU5mGOjmGOTOe2Aa3K

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Erp7.Mrp7.BLL.dll

Files

Erp7.Mrp7.BLL.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

H:\DotNet20190509x\ERP7.NET\Hanson.Product.Erp7\Mrp7\Hanson.Product.Erp7.Mrp7.BLL\obj\Release\Erp7.Mrp7.BLL.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ