pos[.]ServerDataAccess[.]dll | Triage

Sharing

General

Target

pos.ServerDataAccess.dll
Size

480KB
MD5

7a0917d9c948df07dd57b5512033c7d1
SHA1

49b6cb5880d9e4b619f2fcce846bad8e8f27a3a2
SHA256

4cf2fd9efd1af379362f15d6ce892ca6d765cc48d9eccffd0bae1cc395739d79
SHA512

635a9dadc8e9f9ec353b17879b8e0e2c6dba90d096c0393987bc17429ad21bbd95ac14e2ed739a1f14d90b31339087c9c7ac716164b5329466abb57eb79e1149
SSDEEP

6144:JQPr/Tv00lwJ2F6+sA2pTeehdqBn3d7wVd4Ies6+Qn73nlymop2GkojzO2ZCjoO0:k+oFdvmXY9ties6h73RopfCjoO0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
pos.ServerDataAccess.dll

Files

pos.ServerDataAccess.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

e:\工作\PDA部署\PortalWebPda\ServerDataAccess\obj\Debug\pos.ServerDataAccess.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 468KB - Virtual size: 464KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 776B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ