XmlDataAnalysis[.]dll | Triage

Sharing

General

Target

XmlDataAnalysis.dll
Size

182KB
MD5

48cedc5b716c917d03298f8e448a2878
SHA1

120102858df6ad3c7c3f7f59963b4ae2e05ce17b
SHA256

bfe9a20e947bfe870208c808858f589dd029e13326b15dc436ea8e119006f5ce
SHA512

f3e6f1d8e50396a83f9bfab5a54bd58e427539da9da8ae6f88405e64f211fd72d87f9c0d85de0c27809943763932daaef67082ca9db9c223cc5f36bfb9b9841c
SSDEEP

3072:6qslzKQIivdGPCQgpTnB8DLDg3swbj+7MjpmD:6PiiIPMTB8Dqswbj+Qw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
XmlDataAnalysis.dll

Files

XmlDataAnalysis.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\work\projects\HGSOMS\Others\XinKeTool\WorkJianzhiProject_old\XmlDataAnalysis\obj\Debug\XmlDataAnalysis.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 180KB - Virtual size: 180KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 948B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ