SlPos[.]Common[.]dll | Triage

Sharing

General

Target

SlPos.Common.dll
Size

129KB
MD5

5412a05a20a71c24f5bbe258f22e28e9
SHA1

99389c8cfb4cfa6640b894c1b8df49ea52a2e7fd
SHA256

add94958e079e66901eae69afd5a16b124db5ba12822cc35a8f54df87aeeb4a2
SHA512

4b691a1e6dfea3884cb178bb0286f20d92572bbc355957d6eb56c38d82eb10338bba6b6d55299970d20e6b26fc39985def33b1d89c5556ba49d5e4e98795d6c5
SSDEEP

3072:MplGApijPA5+TBXfeo5wCMaEw/GmlCRUdJ220D2r+LPuQaq/ntnLtq8:QAe+FX8CA8lCRUD62

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SlPos.Common.dll

Files

SlPos.Common.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

E:\work\work\SLpos-ERP\SlPos.Client\SlPos.Common\obj\Debug\SlPos.Common.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 127KB - Virtual size: 127KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 936B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ