PMS[.]CTI[.]Interface[.]dll | Triage

Sharing

General

Target

PMS.CTI.Interface.dll
Size

35KB
MD5

c924c5f791e0eb1ab184a402d7369e32
SHA1

6133ce2d984318ef2976dc22ab9d14bd611c1940
SHA256

cb6ed7fb1d6b99b275dc8e47a16fddef53d7375986f371f88e2627245554349e
SHA512

16e81813e52cce40be895782d7f47ce87d9ad0400cef7b904b8853cfc600475004ca49c2b3de80ff2c8921229d693a73dd5d16262b83e81fee4fa5eb0f2cbae8
SSDEEP

384:ANdcVp+i6DRJ31O/WmAR+PuFZtlSHS1Gi3i8xtg2vAgPP7PPlPPbPP2GHkz2SCRd:AkVpj6DRJk/WmyVSHUb1k8XENbHO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
PMS.CTI.Interface.dll

Files

PMS.CTI.Interface.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\索思项目文件\亿安ERP\4.0版本\PMS_4.0\PMS.CTI.Interface\obj\Debug\PMS.CTI.Interface.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ