LIMS[.]Client[.]CFS[.]BusNew[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

LIMS.Client.CFS.BusNew.dll
Size

1.2MB
MD5

774aac68a2fe5e6c67a3fdf27358f00c
SHA1

39ab1a99169d6f1d4286ff08e7e4ab5401d870ea
SHA256

f9fac7fdb0642d8c5dd53f0e19fbebb77b4b9caae01973c54a583b4055aefee1
SHA512

1f38942859b12ac568140770f56c8a2f0b16f1029dfc30864ebe629ce27150f1f798f97ee6053b2341e52b2e85d8647e7d6b995d68a9e109e56009ff88e4e1fb
SSDEEP

12288:IaXC/ZiYRGiFzkoROmYkreRMqlvb+ZcSnPpj36S9fGUedq:VXeY0GiFzkoAaeRXlj+Np0UGq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
LIMS.Client.CFS.BusNew.dll

Files

LIMS.Client.CFS.BusNew.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\wangjx\project\.net\HGSOMS\Client\LIMS.Client.CFS.BusNew\obj\Debug\LIMS.Client.CFS.BusNew.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ