Wms[.]Controls[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Wms.Controls.dll
Size

19KB
MD5

240b894adf30cd73b887406cc494ccb0
SHA1

042588e61ede0783d50efe1778f1c8bf554a9ea5
SHA256

853ef8e136a7c813552689452cfe93f603c2c4b9ae20e1b041265910ef099c2a
SHA512

67082ae2bc814386fb5152fb310dc97cb8f3f081a50f1f52a2d977120556e2a5e0991d4977b17c77ef207e871849ed888a69aa5b1269e37a92708fc6f0d18076
SSDEEP

384:HCJoBWHy0MDAjNHXwmhYT6vlX8mn/vI+odpA3wkEOUP8e/ACtuxtTEtVt0OmYMW:icWS0MDoYT6tX8ynI+KFSXxtTEVzQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Wms.Controls.dll

Files

Wms.Controls.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\work\code\shengeng\v4\client\pc-client\Wms.Controls\obj\Release\Wms.Controls.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 972B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ