SendInfo[.]Pages[.]TKT[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

SendInfo.Pages.TKT.dll
Size

20KB
MD5

e76b79ccfe245e63e5cc60cef78ba782
SHA1

8bd37eb3ff826d9429bd9326af7bb8c014f358f8
SHA256

c05b2f4ea46cd68b27322742c462a204b5d2edd73a93c28b929e55a10c058de1
SHA512

bdb0fdb1d70bcc8def9c31cfab8d9377e5f2ea324b95f9a687642e35be032cb4857ce102076cab11dfb575ab62b111d0cea78103da4196bfa86b65074e3d9dcb
SSDEEP

192:oLUvcHHPjj/RiGoYgL6M+f+O7KGqEdZC5OcgBOnd5ie2WVdVn9duMo/G9h:cHUGoYIg7K/EdZgOcgBQdVdjMMeG9h

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SendInfo.Pages.TKT.dll

Files

SendInfo.Pages.TKT.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

F:\工作\GTMP标准版\2017标准版项目\B_北部湾\业务插件\Server.Plug\SendInfo.TKT\SendInfo.Pages.TKT\obj\Debug\SendInfo.Pages.TKT.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 968B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ