Apache[.]NMS[.]dll | Triage

Sharing

General

Target

Apache.NMS.dll
Size

60KB
MD5

c3e37f418085ce9dd91479088f24892e
SHA1

8f95f5ff5e65fd5b5a3d575e453d58ac15769208
SHA256

8c0e8e416d3aafd595c2044873b448270f10a43aaf139020703b6eaf4405f815
SHA512

f4fbff2a0163172bbea143394164a1883b28544d383767446263cf9ee0b511fd4a8e44ed2fda8692adf04eba2d05491ee8fbbf5be1de1b83366c3e82feaf252c
SSDEEP

1536:eqLl5cl1sN2uwI2Ydb70qMA1mnzsPKaPPSsz:VlErHYB4qd0nzsPKK9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Apache.NMS.dll

Files

Apache.NMS.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\Users\Michael.Pearce\Git\Apache\activemq-nms-api\src\nms-api\obj\Release\net40\Apache.NMS.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 57KB - Virtual size: 57KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ