PMS[.]FGLSalary[.]Server[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

PMS.FGLSalary.Server.dll
Size

69KB
MD5

5ddd41b0ef72e083c3a84da75f92f463
SHA1

28cec56135744b4439a742cee5c7a5ac61571f07
SHA256

f6437137eed15e7ffd090e78f4619d778b52a4dedc99ce9f5cc126d159b58730
SHA512

29c2b93e76e7d07626dac0a548cb94ce2a7c344b03f10a2b1cdf8faa39f2ada73ddfb05ec9641429a54085f1f006a2bb108519b177e1ffbfbf41cccc24944da4
SSDEEP

1536:HwoPeDoeGb5Nfo0VvNOiG2pjWqYWntW4TfAiH7IOxb0jM2UWbj8Vlrvf:HwoPeDoeGb5NxVvNOiG2pCqYWnD7AiHV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
PMS.FGLSalary.Server.dll

Files

PMS.FGLSalary.Server.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\索思项目文件\亿安ERP\4.0版本\PMS_4.0\PMS.FGLSalary.Server\obj\Debug\PMS.FGLSalary.Server.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 67KB - Virtual size: 67KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 960B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ