ManagePDF[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ManagePDF.dll
Size

17KB
MD5

1744ffe724454c6bb35f2761ec6aaa12
SHA1

7c2f6df147a0eff50a87e91bf0c2933943f53f81
SHA256

dcce7f0b11ad1a82ee6d63b41ad81f2a6654eb613892439f1c656f5f7fd658f7
SHA512

413d5fcc5085bd333aef9a62d67deab58c8371783c10ef7cd700ff0de0b885d9212ee04ef86f02a9ddaa768c8457235bd45a2428aa49155d86f7ca601a199109
SSDEEP

384:OvZW/kbxPXMjHl6k9rBrDQzhHr2KS3slbE7auCasQFx42L:OBW/kbxPcjHl6k9rFQ11OslFu0QFp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ManagePDF.dll

Files

ManagePDF.dll
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

D:\Projects\.repositories\tass-manage_pdf\ManagePDF\obj\Release\net7.0\ManagePDF.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ