Apache[.]NMS[.]ActiveMQ[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Apache.NMS.ActiveMQ.dll
Size

689KB
MD5

1ff80c4a3d42a8e4633c7fbb9f62ad27
SHA1

177712c749f3a8322ddb1619e02d8a04bfc31f10
SHA256

0013eaf276c24a6c7c37808bdb873cb9fcb960145f35c67258f94778a080fdba
SHA512

9897762e920791abd704825120557b15500c1e2f5397c9a35fbb4a354a6bf7bfdd58c7fcd1e0a1ce6de78e3e875a3d0592310ca73d7bd414d52e1250cd1b3bf8
SSDEEP

12288:+v+BpPPHwE+l5oLbQBVa37QE5UTTmBxIzAqgPEQ/NrpW55ueS1Q31:s8PPHwE+l5oLbQBVa37QEWTmBxIzAqg0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Apache.NMS.ActiveMQ.dll

Files

Apache.NMS.ActiveMQ.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\git\activemq-nms-openwire\src\obj\Release\net40\Apache.NMS.ActiveMQ.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 687KB - Virtual size: 686KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ