Salespoint[.]DALFactory[.]dll | Triage

Sharing

General

Target

Salespoint.DALFactory.dll
Size

5KB
MD5

d29e6eb134e860a7694c5669f54bcbf6
SHA1

45d72c33068d62238bf82575cfbd5be34f46dba2
SHA256

a8de13efb02d2ba85724d953a7275d82a318e04588dc0376538af04e34353358
SHA512

1463c0af8efc4344f4ae37435cbfe2504d694ddb4607d97f077f64ee49862ec4f1c229dad1e59355fd6cc5c845b8d34b4d2273e737f2f536604ac40a12f225ea
SSDEEP

96:tduFsr7rfegDxv74f0xlAlUDFTiPW7k9PgmrB6:tduLg9nL+0TaW72Pgm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Salespoint.DALFactory.dll

Files

Salespoint.DALFactory.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

E:\工作\PDA部署\pda\Salespoint.DALFactory\obj\Debug\Salespoint.DALFactory.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ