Salespoint[.]WDAL[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Salespoint.WDAL.dll
Size

15KB
MD5

7ab693d2582957dd2afcf956fd76d152
SHA1

fca9d8dfec1bfb11fd4c891fb6fd63c86f721f34
SHA256

cc79b037a30ca82bdce65cbe0108f106a9fa315906403549a1630d4358a204f2
SHA512

da3e3eeeb2ab4819242a6b87bed1aeda920ddd986d5b15ef5409381b44d024b0982ea9ed57916134957379509ed5b48b0ea266ba50566117dc09e72ff65594fb
SSDEEP

384:aIRmsMY3++tayeMxSuozwnHCBZzZgWqFW+D:pi+8BS4or

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Salespoint.WDAL.dll

Files

Salespoint.WDAL.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\工作\开心米奇PDA\Pda\Salespoint.WDAL\obj\Debug\Salespoint.WDAL.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 896B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ