PMS[.]Instrument[.]Server[.]dll | Triage

Sharing

General

Target

PMS.Instrument.Server.dll
Size

40KB
MD5

2f6067c77052da41b7e47b5b4bff6d13
SHA1

b49932785b72ca1a80e82d5b71bf705dc02d6100
SHA256

287b0f171d31634580a0f724eecba3c057212aaab5787216714b28a8f80a3e50
SHA512

eadee06676640faa8d9edc0b88ff5a3aa7c0e75a7c7d02ab32bda742b90c16bbc187ab45855f904bee3afbc57f49a09394d62dc8d1a8fcd8853ed8b11d0dbffe
SSDEEP

768:def1omL27Umun9SeE7Y7ebP1kGmr/5Ue0553NmPBMAw3XA6TzlBo1B:a1ik+Y6jIuL553EPBMnXAsY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
PMS.Instrument.Server.dll

Files

PMS.Instrument.Server.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\索思项目文件\亿安ERP\4.0版本\PMS_4.0\PMS.Instrument.Server\obj\Debug\PMS.Instrument.Server.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 38KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 960B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ