PREP_PDA2021-05-28[.]dll | Triage

Sharing

General

Target

PREP_PDA2021-05-28.dll
Size

111KB
MD5

1700aafeb8eca6b238d99a329dc2940c
SHA1

66a21c61f0b4ee05e90f384e9b47d142a676b770
SHA256

86a90ac1a8894cea9b7a0a367585336087048bd446e62a02d7c2a9f082e31612
SHA512

7128548847ba2afb5ad07cc946b6ae746713c5b88c3f3cbe0107383ec9a63f246c266baf12a283a6ddd812ebd6b9ca5295327717521e60301f3ca4b664d9df5a
SSDEEP

1536:NpN83VTc27QjVczKYH1Ui0MzpNQkfJZXGXDkrp:NpN83pcHcziCQkx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
PREP_PDA2021-05-28.dll

Files

PREP_PDA2021-05-28.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

E:\项目\轮胎行业资料整理\顺福昌\福麦斯全钢\程序\itMES_PDA\PREP_PDA\obj\Debug\PREP_PDA.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 109KB - Virtual size: 108KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 824B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ