DcTech[.]PDA[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

DcTech.PDA.dll
Size

19KB
MD5

b7d4859fe43f366cef812bf1738b2743
SHA1

7e12f42018cd67b75bc19fb41f25334224c1e628
SHA256

0915843fe723d7cba3488d247d0d6b83e6f910b45de0b11931301d95d7df893b
SHA512

734f70eeb482b6861a86988762042204b583c97bb5e4b52f05c6d74d85b9078b0efb39ec8cac0c343dbbde88e93a90f6d0f40bb499f7eac3c2697c4e2d8cc058
SSDEEP

384:72QfTI7D7F1UIV/mnapiTBwu5iOXFewV5aiLhUeZ5NOoXncz:72quHF1UIAapiTBpTLhUe5OD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
DcTech.PDA.dll

Files

DcTech.PDA.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

E:\项目\讯捷物流\新系统开发中\NewSourceCode\DcTech.PDA\obj\Debug\DcTech.PDA.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 904B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ