Erp7[.]Mrp7[.]Call[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Erp7.Mrp7.Call.dll
Size

3.4MB
MD5

321e07ef1f2620a9dfb6e9882b244feb
SHA1

cd4eee4101d202c39f2050c8c37686808253d5a1
SHA256

d126ef293546adf028c9a02ec8ae0fe18e187c4d3cd093b5865802b7809f35f3
SHA512

f0e4364636fd65e8de24725ba765fc132a10b0e2de9462ae5f3795d6df2514db94b9ca1beeae7ee7abbd7c9b4fd21c5b5dba565070547fbc7bcc45c6fb771914
SSDEEP

24576:KSHDTDOZMkpWXEJMoeXaKV2N8quohzoeHlA2lnAeXSeG3C:zHD/9XmbNuohzoeHlA2lnAeXW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Erp7.Mrp7.Call.dll

Files

Erp7.Mrp7.Call.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

H:\DotNetY3\ERP7.NET\Hanson.Product.Erp7\Mrp7\Hanson.Product.Erp7.Mrp7.Call\obj\Release\Erp7.Mrp7.Call.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 3.4MB - Virtual size: 3.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ