Erp7[.]Erp7[.]BLL[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Erp7.Erp7.BLL.dll
Size

55KB
MD5

3aaee645feb9bc5e76d8587b89394685
SHA1

d477698a52126c857fdcb3d717e3ec7d6139072d
SHA256

fd415b8348932ee95e206810f412cb5c2c307ec86e982a26f80846fcbb70c429
SHA512

3d7c3d3ec06134ea16785c379e6026fb5ca1b7003b2903a3688a207a91c7f36214339f133618348177f8139de02d91ec4deee66354ebe9e3cd014636a4d88af6
SSDEEP

768:JFTFyF1F6FM5W5L5s5n5UxlmXcoYR/WF0oIscaRI12YpgQ2ple7aXC6u6jGN0hqH:BxgQxqXSg9lWlr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Erp7.Erp7.BLL.dll

Files

Erp7.Erp7.BLL.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

H:\DotNet\ERP7.NET\Hanson.Product.Erp7\Erp7\Hanson.Product.Erp7.Erp7.BLL\obj\Debug\Erp7.Erp7.BLL.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 53KB - Virtual size: 52KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ