PMS[.]Park[.]dll | Triage

Sharing

General

Target

PMS.Park.dll
Size

35KB
MD5

22f5e16ac0e8eb25cdc533ec95eea553
SHA1

1704d57747d409334c08a1ddf9fbbb5739778862
SHA256

9640ecec732da14e04070e22535dcf86657be16cc7ff2538d3b502f526273e98
SHA512

188da3f43277609525a6ec8670a58476f44fc7b2a5944145b589a4e952224237d7ee1ae5bc02c15ddfd11a7a24dcc97cd92419e018e21963ad302cbb9734d5fc
SSDEEP

768:XcLBvAUiMjKeb3VVGfF+n2qPh2i0LX+UOwe9D1yNln:+xAU9Vb3VVGfonFPUigXtOwe9D1yNR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
PMS.Park.dll

Files

PMS.Park.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\索思项目文件\亿安ERP\4.0版本\PMS_4.0\PMS.Park\obj\Debug\PMS.Park.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 824B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ