LIMS[.]Client[.]BPS[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

LIMS.Client.BPS.dll
Size

507KB
MD5

bbd1a6901186aeb3fc30a3dc0870ad35
SHA1

1bc11ec3f92021453f526d377c9b5b4d8cbd6df2
SHA256

d23f5deab200d37d4d828584b51dbc19bf4fa6e10ae1c5fc521068fca5315c2c
SHA512

1ee94fe68cc40cd0f4398548e672030c3e0beee1748e1a2dfb8c79f10df364b7f3ef636087391099215b7e93ad0592d53bbe63af84859e2455a541c8133d8c18
SSDEEP

12288:6Bm2s2d272kKfHh61W4qEMCTDWx4v4v4v4j4:6iMCTDWxsssS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
LIMS.Client.BPS.dll

Files

LIMS.Client.BPS.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

E:\Code\YUNHUI_CODE\HGSOMS\Client\LIMS.Client.BPS\obj\Debug\LIMS.Client.BPS.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 505KB - Virtual size: 505KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 936B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ