EasyFAS[.]DataSyncConfig[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

EasyFAS.DataSyncConfig.dll
Size

18KB
MD5

49daf0a9b83992b99184c940ce1ecfe3
SHA1

2a4f51af47849e0138076c15d8f333467a0bb65a
SHA256

b443750244e08889c6aadc7303f6d55740dd9c82b4a74c67c4a5959c35fce9cd
SHA512

965092eb105b346de6d7f00684cc110c9aebef8354bbbb4550e48a9de47d24eafa5ef055fec6c284dd7f3a572ff743c0747ff21c1e37fbf48d22197ed1ab0aff
SSDEEP

192:Kg7fra24uuP3QOpOe/LryqKP/Ty97rjqUHY10iQawbxdZmqNR30/:Kg7m3LgeDGqS6rjqU410iQamxdhL30/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
EasyFAS.DataSyncConfig.dll

Files

EasyFAS.DataSyncConfig.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

d:\Product2\IMES\trunk\DataSync\DataSyncConfig\obj\Release\EasyFAS.DataSyncConfig.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 856B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ