H:\DotNet20180830\ERP7.NET\Hanson.Product.Erp7\Mwm71.ETP\Hanson.Product.Erp7.Mwm71CE.BLL\obj\Release\Erp7.Mwm71CE.BLL.pdb
Static task
static1
Behavioral task
behavioral1
Sample
Erp7.Mwm71CE.BLL.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
Erp7.Mwm71CE.BLL.dll
Resource
win10v2004-20240508-en
General
-
Target
Erp7.Mwm71CE.BLL.dll
-
Size
45KB
-
MD5
8c6cd3ffa42f94695b77ed679f4f1b63
-
SHA1
7453b3e0d2567c6043133a8d150a1b07cc65dfa2
-
SHA256
845be0f54792abc1678f70e91cc7b570cc97d0b8442c2e770fa4cf346a655917
-
SHA512
468c0e058b30cdf0354b6e96bda34f92579d5a8d3cf70c9a422277044fe0ee18e12e80558769aeb9a2ce2b9ad36ad5228befdb4f30ee71b0c5127ee8c86cd37a
-
SSDEEP
768:kc/ES+OByEDc/ES+OXUbZ6wuJWLG/M5A/Mlj/cpEj/8po/TGf+Vq925d4/WPsWhU:r3dZ7Nq9OSN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Erp7.Mwm71CE.BLL.dll
Files
-
Erp7.Mwm71CE.BLL.dll.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB Paths
Imports
mscoree
_CorDllMain
Sections
.text Size: 43KB - Virtual size: 42KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ