Common[.]dll | Triage

Sharing

General

Target

Common.dll
Size

2.0MB
MD5

c55fb527b6f17c1108d4feb05783ff44
SHA1

c62fcff2d22ad401cd6be1427908eb8ff14713a6
SHA256

97ff8d0db6ef32b1d7bda6d0ca4077ca77b77397b0bd8fb57df47798e85afb15
SHA512

eb0007f2dd7e731f9e7ca8ab2dfafa3d96f630cea58dcf440ff1ed43ddf41f8b3b0960dec9195aea4d37be68bfa663a4b732a01edefe9a0f38376b1823e4011a
SSDEEP

49152:Su49Lc+YiPA+YiPf+YiP3+YiP3+YiP3+YiPQrG1G:S

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Common.dll

Files

Common.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

E:\京沪彩印\erp\Common\obj\x86\Release\Common.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 2.0MB - Virtual size: 2.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 876B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ