ZiQuan[.]VOUCHER - 副本[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ZiQuan.VOUCHER - 副本.dll
Size

38KB
MD5

b1674ad1e7709b530528aaa92dfc7b46
SHA1

82ae5ebab0159d5e9487bf7f376fc8c55ce710b6
SHA256

c4500fe2d6cfdc23f1ddaa9e78ab63585cc775f5f948fea681ca6d1d7c2bb727
SHA512

0a1b9c40a95880c70667f7f6d6a8b7be7d2048b5df33602a3d0e9b056360b04e685549edd4df994d3b26d29d0923bc93c46371a101a438259a06f15a36762a6e
SSDEEP

768:4uvgH6ttnLlYH/4JGBEzRYiL596EtUXp3xO4gAEvmOIfP5xTO:MH6/nhlJHRYCmE2Xp3xO4gA2nI/TO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ZiQuan.VOUCHER - 副本.dll

Files

ZiQuan.VOUCHER - 副本.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\wangjx\project\.net\HGSOMS\Client\ZiQuan.VOUCHER\obj\Debug\ZiQuan.VOUCHER.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 936B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ