QA_PDA[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

QA_PDA.dll
Size

523KB
MD5

8ac8cdc362610909da2ae97aba884aeb
SHA1

5457f17de176bb991d9891b9122b1a0fdee9021e
SHA256

90755354b7440943e19f14dcebf15c2d3fb957a5479b75725478c18eaac5f917
SHA512

83c501c1313039fdf5f366d9f872c63ec1319d215497dc36d49517db6297151c0d96db19abc9cd60fb0f24054509dda976f0ae1c324298a566ffcd21d6a8de5a
SSDEEP

3072:7ywacZF+5FJ0EQrTUdjyB/56NO+Ol2+KflsOpPn7TVF7WfeJ1RZzsvWgQ8Mj3Xmz:7ywaQF+n3ogZe2+Kflz75F7W2J3Zb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
QA_PDA.dll

Files

QA_PDA.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

E:\项目\轮胎行业资料整理\顺福昌\福麦斯全钢\程序\itMES_PDA\QA_PDA\obj\Debug\QA_PDA.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 521KB - Virtual size: 521KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 760B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ