POSServiceRest_20240509[.]dll | Triage

Sharing

General

Target

POSServiceRest_20240509.dll
Size

41KB
MD5

f914fb617c26a53260e7dbc75c7accfa
SHA1

f3cea42a6bd554d24f0fd29b288e772d2005ce03
SHA256

bf52acd7e35225eabd056bd47b046e395e710520304848193a12da0e03ff7865
SHA512

edbe2775d97f5c6e3dec4da4f6c1d02fa5de668cb6924e9b6e247fa6f5fd6f5bfee0542df0ee3bd896ded8a64251f65c631887b3c8e6f88155ba4aac0f15737a
SSDEEP

768:5e1P61c1w+44PVtHQdjJs1YdwIKTufz3nB9PeMkPzP/tB:Ah6mh449tw1J+IfTB9PeMkPf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
POSServiceRest_20240509.dll

Files

POSServiceRest_20240509.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\Projects\eVoucher\DHL\POSWS\POSWS\obj\Debug\POSServiceRest.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 39KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 936B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ