EasyFAS[.]Modules[.]ConnectErp[.]Service[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

EasyFAS.Modules.ConnectErp.Service.dll
Size

25KB
MD5

aa2a4da5b06362c86bd9e17b99c003bd
SHA1

f2acbccff7a5a030ad6508ff15c2498d72693dfd
SHA256

1b9cb42f793a1d9f48b2ac0621677d9007741a1ade61ab4b5ed18c436a9d77ee
SHA512

970615837da8fa9a417fba6c129b55c3e7ad0ffa6d9a01d7574a1d61b5a6cd0145ef21969f62b47db7d835a1d68baa533c7cd3766c944118bb07f47fa0405b59
SSDEEP

768:j1mjXIeiDygTL018Cgo3WPIbfCYVdhjvfO:rXeGPQG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
EasyFAS.Modules.ConnectErp.Service.dll

Files

EasyFAS.Modules.ConnectErp.Service.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

d:\Product2\IMES\trunk\Modules\ConnectErp\Service\obj\Release\EasyFAS.Modules.ConnectErp.Service.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 872B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ