Salespoint[.]Entity[.]dll | Triage

Sharing

General

Target

Salespoint.Entity.dll
Size

176KB
MD5

316e879d3246d710c1d6ca02ffeee4b8
SHA1

48e86c3adfec7b424d2db8a1c6214726905bb626
SHA256

1753eec18abc94b1ee60e02993fff92887f7e808055f91cc939c03be0d9c2c33
SHA512

f629d752b8b579f30340c0c8e7588e36780bdd8dd87453fe4dfc64dd2f02300f33f6467c9ebb0dc968cf6abb0d51cf72b4afa01f881d1e91b7918944a00a3bde
SSDEEP

3072:TahPSoL8xfOF8R5Uz7IASZyn0yLAiFYNnci+wxnbWPFiCxR5M:GRYxfOF8R5i7IASZdyLpji+wxnbWPFik

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Salespoint.Entity.dll

Files

Salespoint.Entity.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

E:\工作\PDA部署\pda\Salespoint.Entity\obj\Debug\Salespoint.Entity.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 174KB - Virtual size: 173KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 832B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ