LIMS[.]Client[.]CA[.]Biz[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

LIMS.Client.CA.Biz.dll
Size

2.5MB
MD5

1a06b966a4bc481bbccf113f64f9114a
SHA1

73fda759c8ebc8327e14a0a63f9df60606831935
SHA256

4f080cd0fc2f9d5086d778eef3e43a73bd3628308150b06abb47c3f060a7d4d2
SHA512

a21d532a85ad6553e8147fab604caeba6a742ea23583879bd3db157d7f9c8c664929361d047b87fe62738defb059e65a376c2c6424b3ee9a6769b4932621dbe3
SSDEEP

24576:UrFkt+J52ZhX8ix0Xnf9jXOcxPs4v9Po8+kM3zFE:UCNhX8ix0Xnf9jXtP9Po8+kM3xE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
LIMS.Client.CA.Biz.dll

Files

LIMS.Client.CA.Biz.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\wangjx\project\.net\HGSOMS\Client\LIMS.Client.CA.Biz\obj\Debug\LIMS.Client.CA.Biz.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 2.5MB - Virtual size: 2.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 968B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ