WmsReView[.]dll | Triage

Sharing

General

Target

WmsReView.dll
Size

324KB
MD5

0131c83d1918cb8b8ae4ae958725a648
SHA1

3d61323f741e597b224f9debfbc2f4c49941f8c1
SHA256

7f49f0c0d5ec6ad776d3d08f6afa18218a5990b0ae87fdb4d3a8804e2d321a1c
SHA512

13ad484ba8360943476eafb76d07ca11644433ce793b7bde6f60b2b65695bc5167fe7fe24da825c17aa7d0a3342ad93e9a73107c0f7e7575b00dca39fe8f79c0
SSDEEP

3072:Iej5XiCHeaEipKbgdwNPP+GGYCY2VplUdClQElkHsXmGxaNWlWGC5LF0HkjN0/aj:IW5X2Mp7VaA5iQgy+iYmaS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
WmsReView.dll

Files

WmsReView.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\project\重庆铃宇\WMSAPP完整版- 铃宇 - 最新\WmsReView\obj\Debug\WmsReView.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 322KB - Virtual size: 321KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 776B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ