DrectSoft[.]Core[.]IEMMainPage_SX[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

DrectSoft.Core.IEMMainPage_SX.dll
Size

542KB
MD5

bc74417e84ea75b3c38b59f0a0fa445b
SHA1

81abb542abed577f7e28b788a2a2ab2dd49935c7
SHA256

07e4758c0f30967862b35704a50057d8b72ac5c0d862f8af5e13c84b9e522fa3
SHA512

b8e12755825539b03ec07132eac12deadcca13c6b708f1338c87ac1330e55db35ce00bec87b0cdcf20b9545e7b5499be7fb5189d15633d7da0714017f43dd639
SSDEEP

6144:338In6pGnsAO4YiQ8xfEBr1BsVYgiV83JdR5akuvzuzeDJafPr8ZxVA:H6LAYihfEJaXr8ZnA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
DrectSoft.Core.IEMMainPage_SX.dll

Files

DrectSoft.Core.IEMMainPage_SX.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

e:\Demo\EMRX86\Core\病案首页\IEMMainPage_2012_SX\obj\Debug\DrectSoft.Core.IEMMainPage_SX.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 540KB - Virtual size: 539KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 936B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ