Salespoint[.]DALFactory[.]dll | Triage

Sharing

General

Target

Salespoint.DALFactory.dll
Size

5KB
MD5

afb2cb88b590e87620a2c2ca314677cc
SHA1

07c31cd405fba831e559c31aa84a726bcec7e027
SHA256

6c2e09b6d2cbb895c629ab4b3b31dcb3f1454c49b45a7904a5a2a024f65978ef
SHA512

4f949372941af23d611f76c45347355e8ad86384bd4123d7fd94d46d8ccbe2d008014294ffd883be1ec874e15740a6401d282d2beb3495ad6a3d7d3ca6b8c9fb
SSDEEP

96:/duYsr7rSMu+73o4f0xl6yKDFTOW7khPgmrB2:/dufCnLleTOW7KPgm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Salespoint.DALFactory.dll

Files

Salespoint.DALFactory.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

E:\工作\PDA部署\pda\Salespoint.DALFactory\obj\Debug\Salespoint.DALFactory.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ