CURE_PDA[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

CURE_PDA.dll
Size

110KB
MD5

f57f22045f317195d77ebb8ed4a8f38d
SHA1

2545a2ed34f1f4808e623778d6136009d6aa9db7
SHA256

363fbb973f886691c0f98e4067e9eca81354ad1347183c15d5a0be8d61755d47
SHA512

8fb952f699a1b4907166c8f597c4b78884458b5448c19825050483951fc716e2f75ebc4edb2e5d65611e77ecb91dc02dc3dc91789b695ed4a1a2278d369f2a0a
SSDEEP

1536:/u+f6tk1Oy81PROqehanWyog65zMcjeikzc3ReK:ct/51PROqekog67j3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
CURE_PDA.dll

Files

CURE_PDA.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

E:\项目\轮胎行业资料整理\顺福昌\itMES_PDA\CURE_PDA\obj\Debug\CURE_PDA.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 108KB - Virtual size: 108KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 824B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ