Hanson[.]Data[.]dll | Triage

Sharing

General

Target

Hanson.Data.dll
Size

51KB
MD5

057fd27963ed9255d6f70e0e837f902f
SHA1

ec01a58e6a560e31546ca62ecced779d444df83b
SHA256

73e06e66c9bf0233af567dd3326ae341248efd096aabfe032866ef57c2be928e
SHA512

278421688f8c958f7015fcccb7871bd7c2260384d7b40a035631f0d49c999610c253ae4a50a39b9e9d09ffb920c05da45b581afa5f37ee28754edae5cc15b9a7
SSDEEP

768:ffjLx4KgIydEGbG0Wc4ASbwWAdMC27ntkaWvzITxM1Lis3d0ydF/:ffj14KgIyq0xdV6tntka4zAEd0ydF/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Hanson.Data.dll

Files

Hanson.Data.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

H:\DotNet20181206X\HansonFramework\Hanson.Data\obj\Release\Hanson.Data.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 49KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 976B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ