PREP_PDA[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

PREP_PDA.dll
Size

112KB
MD5

894bbfbafc3fa52386b6207a8b747555
SHA1

1ea0e9b8488698a0daf88052336a43c52c914bdc
SHA256

e36fc9e993ec3044d2d7fee54d82932788ec29485316d1eda5408167754d5ebb
SHA512

1cbb960b2934816d34f9ec66b346ab8a2543e1945b2e6a14ab3d1c4fa846674c2d98d5dd0446e0644b8448d21bfb61aa056177e4ffd26cada73753395f67b11c
SSDEEP

1536:f3NBWU2ffqh4Ys+w2huyvR8wL0KUXGXDkB7:f3NBRyBYs+nOwL0H

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
PREP_PDA.dll

Files

PREP_PDA.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

E:\项目\轮胎行业资料整理\顺福昌\福麦斯全钢\程序\itMES_PDA\PREP_PDA\obj\Debug\PREP_PDA.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 110KB - Virtual size: 110KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 824B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ