Phiham[.]MES[.]DasSystem[.]Core[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Phiham.MES.DasSystem.Core.dll
Size

132KB
MD5

ff347cd5f8dc67c7189289d9ec734dea
SHA1

06488eb3bab21f950747a2ad058fc043aaf55d31
SHA256

37dffd5db5a23839a9ae7219f2cde9edd2f9f196b91f55a5efbb45a56880e277
SHA512

6c6a97a4012f0955e2256fad2c7881a4f9c21c78f7601e2794f768ed37fed9ca8cd8e3b5f680eaf844f12c2fddb04e9a10ed7c15c33c81f8b10fa47d514d8b56
SSDEEP

1536:OQiWaD/FKAYNcLSSszHxT6OXRZHgoXDyM/rVLwD+KVSJLwf0b8yuXL637r0:u0tQo20VyVSLw88L637I

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Phiham.MES.DasSystem.Core.dll

Files

Phiham.MES.DasSystem.Core.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\项目\无锡明恒\Phiham.MES.DasSystem.MH\Phiham.MES.DasSystem.MH\Phiham.MES.DasSystem.Core.MH\obj\Debug\Phiham.MES.DasSystem.Core.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 129KB - Virtual size: 129KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ