PMS[.]ArAp[.]Server[.]dll | Triage

Sharing

General

Target

PMS.ArAp.Server.dll
Size

70KB
MD5

7d8dbc98200d98b033237c2f82a6d7b5
SHA1

3d04530abe1bd502c5b54551fcb4be34ea9848ec
SHA256

fd4cd61ae3d4957e16518e022376e8fb00cce8efb3b5cd8c019eb2b9d64245de
SHA512

cee926e99a84225283b91ed891fc084c723d3fe7b1ca5cc01b1ff449b72a119cb29fbfaf76358388117e2b09cdb57afc1aed62bfd89f8fe174738cc3771dff7e
SSDEEP

1536:SHel++4VETIpld7g3LzCMPRlETIfQ/xyJWlurINAOLjvBHvBzjNAeLsO9KkVaDan:Ao3PTXFA7KjUGO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
PMS.ArAp.Server.dll

Files

PMS.ArAp.Server.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\索思项目文件\亿安ERP\4.0版本\PMS_4.0\PMS.ArAp.Server\obj\Debug\PMS.ArAp.Server.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 68KB - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 912B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ