EasyFAS[.]Modules[.]Storage[.]Service[.]dll | Triage

Sharing

General

Target

EasyFAS.Modules.Storage.Service.dll
Size

73KB
MD5

5888a781ef47cfd97711b5bb62635fd0
SHA1

aa877663da0ce5fb03147347adeb2da047ba4f22
SHA256

e8941972f49c18eb8c30d13f811d2262be0dd32042bb585b73130a95a9f09739
SHA512

dfab4cd47bb841dc4ec0e64b4ee3670e80afd3ad01b0855f116b539c77ac48f35642edf6c6253e0ce0f116af7a0bfa445d2cd60642f26176feb541e21e261b45
SSDEEP

768:3d9zag8R/e+jd8cJazrI5Kn2k4xoNAjLGFOQpqIu1wdKHqNaczrixcYE6Ub:N9zV8R63PeS+CQLIykFrEBED

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
EasyFAS.Modules.Storage.Service.dll

Files

EasyFAS.Modules.Storage.Service.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

d:\Product2\IMES\trunk\Modules\Storage\Service\obj\Release\EasyFAS.Modules.Storage.Service.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 71KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 872B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ