SAPBusinessOneSDK[.]dll | Triage

Sharing

General

Target

SAPBusinessOneSDK.dll
Size

5.4MB
MD5

f7407b2841542267e17d191fcc184a4d
SHA1

d2ed438a99ea1bdcca7b5e7cbfff4ea1bdbfd440
SHA256

1f60c77c44b3fbe2da8cee79dd945e623313433b9a0246040ca4b9eab2a5ee2a
SHA512

e48de46894cf0c2f3ad3a95e1fddb17a80bf16df2bdab12955d0fa40bcebeed8883440927cc4b31051e5d17c22dde08bf6d80616c353ac8184a0359b602d642e
SSDEEP

49152:CX4nTgWaL6H6QsXV6BNjkkt4OrHNrbX9T2jcByvcPEQsNf:clABl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SAPBusinessOneSDK.dll

Files

SAPBusinessOneSDK.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_DLL

PDB Paths

D:\depot\BUSMB_B1\SBO\10.0_REL\Output.x86\SAPBusinessOneSDK.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 5.4MB - Virtual size: 5.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 996B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ