POSServiceRest_20240110[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

POSServiceRest_20240110.dll
Size

40KB
MD5

6786a3a8c7e188090a8af4f7d1e1bbf5
SHA1

260690d1397896cca8db1b871ff39340e759b5fd
SHA256

f7aed4628639d0f19ce87397386e2cff193b633cb1e54987097093e5bac59942
SHA512

f35f4a28d84552c2192322cb7bff4810d6e78194b438ee915783f67b9fa3d9163710ef72c5b0ec9806b988117b4d43cc01c3161afa319ffb4dfe5a72b9f4bdee
SSDEEP

768:leeegme20LdxhFWsfG16xuvz3ZA9PeMkPzP+Q:l7IGLdxhFW8K64Da9PeMkPV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
POSServiceRest_20240110.dll

Files

POSServiceRest_20240110.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\Projects\eVoucher\DHL\POSWS\POSWS\obj\Debug\POSServiceRest.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 38KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 936B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ