PMS[.]Manage[.]Server[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

PMS.Manage.Server.dll
Size

562KB
MD5

7a993c83ae16e880b3a907decb679266
SHA1

9687c12e67b839f9280109e40fe47e89aa741ccd
SHA256

4644f64595e66eaacd2bc9bf5835c479c581d9ffd0340ff87df1370c72b9af73
SHA512

09ef5bd9e96e77a93a1279e541bfa8f6e2868a8a90f4c9310a73bce0ec0ff02a90283d4c48d83af2b99e88c4cb70bdabbb8743628567b49f30dd02a8707cc974
SSDEEP

6144:eO7OAlrZjPlnrTZvpXA1k7ILW6RaTS5zxQwwg+OrBWiId+ou:t7jlrTx70W6GaBLo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
PMS.Manage.Server.dll

Files

PMS.Manage.Server.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\net\PMS\PMS.Manage.Server\obj\Debug\PMS.Manage.Server.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 560KB - Virtual size: 560KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ