Hanson[.]Web[.]Service[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Hanson.Web.Service.dll
Size

9KB
MD5

d4b85ce26c5f29098b2a89826c7b20af
SHA1

30c30c8bcbacc5c9dafe7a5c6ec61f9f0f621446
SHA256

2f17b2a3bbef5167fb3805f298bc139edba434351064439ba543468cdb792b88
SHA512

d27f607f790b6b0a1b0d960edbb45b806aa8033790ef30add5b71f59611fdc811c490a3dd3e7e36d8465aba360438d27facb0a3e0629df2dbfc05b52282817c6
SSDEEP

192:vEm991NNy91q1PWhKTGAtvRB5pxDdmtiS2MZW:8sFRWQaqJdmUS2qW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Hanson.Web.Service.dll

Files

Hanson.Web.Service.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

H:\DotNet\HansonFramework\Hanson.Web.Service\obj\Debug\Hanson.Web.Service.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 968B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ