UserReport[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

UserReport.dll
Size

35KB
MD5

631f65fcb11e480e562af91e71411b19
SHA1

f09cf26bd9bacfd94e6de8c779ff73f83e0c1308
SHA256

85fe9d45a5d73548ff573eace3ca8d7a8d64acbd0b22495f4808b175bc878fb5
SHA512

2ad493abda54153368378121a9bc438427802aff4e040f6c1e0c301fe886eca4e48acee31c54242a7b2e354850375a293751bd88f10f4966d82c7e3635c23644
SSDEEP

384:Z9kLpcCW6HLY8w9vX8nRYkgTfmR0tkEBluQyG5pMSfNY16cv1Wno7BU0QBU/yMfC:YcZ6HL5vQpm7WOULKsRMiVM3JaSTkvb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
UserReport.dll

Files

UserReport.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

E:\京沪彩印\erp\UserReport\obj\x86\Release\UserReport.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 980B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ