Wage[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Wage.dll
Size

132KB
MD5

6257d473ac3b11bed423ff7604649b00
SHA1

37fccb424d4837a4a2106a93d89029f67f4c0975
SHA256

1f94506c293dcad9fb4fb0e11ba8309a993984dcf50fce3c1ac4258fc7988571
SHA512

3ada025f0203192642ff482609a5e8832525a3d469f16239ee8e944c69467f97d9236a8c98ec28227dd6f245b4823dd98214dd7b8a05d28b0f24ebc5ff70a8c3
SSDEEP

3072:AaMSxg0/6Fkl3+xb5Iwt3T55o0U+8fdFFlBNF+G+CuCPyg0HnznWKKfDp4q8WSk1:AaMcP6FkRjPo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Wage.dll

Files

Wage.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

E:\京沪彩印\erp\Wage\obj\x86\Release\Wage.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 130KB - Virtual size: 129KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 868B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ