YHPlanInputDispose[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

YHPlanInputDispose.dll
Size

101KB
MD5

719321ee71667c43f8d8ca28fb6dcde7
SHA1

996b4c7c60048696624030cd16c0d5f58e226248
SHA256

8e45bf48179f0b009f274173c9e9718fc53366d48abdef3f8e8f668c700dec40
SHA512

784a5206791517b3255e3f33364793e432bd009c694c969357acf8df41dbbe500ed8626d81ed360d84a7a0fd09d0789a37c084098cbf0de7cd285d8d4e324a42
SSDEEP

1536:FtsLfj/jhYAvjQLOYezBDpW72y5k29kXq7RS/UoNuHs6aJp0/yVeZWuE:Hs99vjQ7ezurGq7skH8M

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
YHPlanInputDispose.dll

Files

YHPlanInputDispose.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

d:\AllProject\杨州万方WMS管理集\CS源程序\接口管理集\出入库计划接口集\出入库计划接口逻辑\YHPlanInputDispose V1.024\YHPlanInputDispose\obj\Release\YHPlanInputDispose.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 99KB - Virtual size: 99KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 872B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ