PDAWebService[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

PDAWebService.dll
Size

298KB
MD5

11c4e241674b2c9ccdc7685efa1fd27d
SHA1

8317b92b64e72b70bd91ac6f683d0dedbc3bdb86
SHA256

53a7a029228702f87961ad555139b17c425ea8d8b411793912ae02512d134067
SHA512

0f64a0c3e1245d9bf01f1a0e7f93c68d66ad671daa3020840bce89c5354f7feffeef08bb026fbd8eadce255c4972707cb393cbb9436c9766c962813eabfec6b4
SSDEEP

3072:WHVE4UDxgfd32oFjLJUkdKzSN61BbOI/r7mhRfwdV9mxlYV6FPVDw2D0B44HpgDj:WHVE4UDxkLukURl/rQDkGlQXu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
PDAWebService.dll

Files

PDAWebService.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

E:\D\Program\RegentES\WinCE\trunk\PDAWebService\obj\Release\PDAWebService.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 296KB - Virtual size: 295KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 872B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ