Salespoint[.]IDAL[.]dll | Triage

Sharing

General

Target

Salespoint.IDAL.dll
Size

7KB
MD5

9f841798be515777abb0c91ba49f4eeb
SHA1

5c7d7c0a9ff258997ece3645ab475fbaa2209738
SHA256

aef5c3ae4be1e46c861430793a609ecb4d0c2b3eaf9999389bef5c075998151e
SHA512

459a9c9bcc1c60ccc694414cf7516527d92b60ce5bccedb815c3983265459945532ca38a710e0adfef378746190c3763f706d82417612726b4a26217fae7b17a
SSDEEP

96:GRAnruSALCHwG0kN60lgAlhNzdXpFhpPkaQ9W//UFU66pq4DnQQ0eW0Lh:CArjL60hTDFrkaQ6L6alp0eW0Lh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Salespoint.IDAL.dll

Files

Salespoint.IDAL.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

E:\工作\PDA部署\pda\Salespoint.IDAL\obj\Debug\Salespoint.IDAL.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 944B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ