PMS[.]FixedAssets[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

PMS.FixedAssets.dll
Size

579KB
MD5

3845e32129a92f61cab530d6fc94a7ce
SHA1

bffab75a2ee1d199e5f45ba1b36a4099ac2ba046
SHA256

d2e13d3dc6b71b056167602440ee4ff55a7402ab7821ded012cf1dbbd3cc5184
SHA512

74dfb11d44343b8fd903def8359cf23d580ba1a7da802d1764fa784ae1aa89f09b520fa340339482241506a0fb8bf0140c2f0957716003059a64d6caace1c3e0
SSDEEP

12288:wVH6D2S8NAauYPlg6kE826WaMYsgcSuqt6mQGoAugSECBLNyDpdAR6bXwLYXSsnZ:g0Dufj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
PMS.FixedAssets.dll

Files

PMS.FixedAssets.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\net\PMS\PMS.FixedAssets\obj\Debug\PMS.FixedAssets.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 577KB - Virtual size: 577KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 912B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ