DcTech[.]Logistics[.]Data[.]WcfClient[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

DcTech.Logistics.Data.WcfClient.dll
Size

884KB
MD5

6a4686f90d70b4f97f4ac963acb4c60c
SHA1

8862b09adc5ac2d2b229c4e65dc0291751a1cebf
SHA256

bea5114780e797272d5edc18adc062349eb5c1fd29d83fd9fbaf9e9f69fc45c5
SHA512

b971e7951648cb0edbd3adfa466a8b1c81b6f5a2a41afb089e13a15617e1166d66462a020b4f9b4c9322212e69458cda4d649d038cb8cdee141bfe1d06ed0819
SSDEEP

12288:ngawLzGCDkRRU34rgbOiod1wcxHObYtrfPWCHXi:gaqzGCDkRRU34rgbOioIb4LPWCH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
DcTech.Logistics.Data.WcfClient.dll

Files

DcTech.Logistics.Data.WcfClient.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

F:\项目\讯捷物流\新系统开发中\NewSourceCode\DcTech.Logistics.Data.WcfClient\obj\Debug\DcTech.Logistics.Data.WcfClient.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 872KB - Virtual size: 869KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 1020B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ