PMS[.]TalkBack[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

PMS.TalkBack.dll
Size

74KB
MD5

8e75e493dc009918a376d25503acbdfb
SHA1

d9155cd0777ac8fd02c4f067cc47a864d0bde167
SHA256

c9fac77c60e6eb5e2324bc4c49c1f576dc23803b01fe26f0e11dc7735511a9aa
SHA512

29dfd8372152b25288ac04ff75b9e62c817826321f74ab98ca15c87e876313922c0ab30c24e4ccceaa83498ea98c3e0c12a8f3d78875eb31ea7ed80bc32a48c2
SSDEEP

768:cQA4Q/Hfbz9/uVvQ9mFiBT+LcXejcrNwhemZEwjZAsQEpx+Enm6RvkEL0kX:cQW8VI9mFuOjchwhRZEwjZzP+Is8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
PMS.TalkBack.dll

Files

PMS.TalkBack.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\net\PMS\PMS.TalkBack\obj\Debug\PMS.TalkBack.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 72KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 808B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ