PMS[.]Manage[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

PMS.Manage.dll
Size

4.6MB
MD5

f504b2ec8f1d9c463d8af46555b90a59
SHA1

2dfe063f18ab7c28849dcda1caf55bfe948c45f9
SHA256

0e26527115f75262e399a45e356b0ff681e0d3bd162cff5c391aecc8140a36a2
SHA512

c6f3d8d8d50edbaee9b9370136a9f26bf0aa36b46ee5a465bcd9edc3c0c7a2b687ab541fd38693b27122501e7f7fe5c342a5b6a24d1ddc8667a1808dfd78e7b5
SSDEEP

12288:n2B4TcEbq+7SFnkCHLS5YGNh9fh8YzoT3tfrEmqC5yT3QNJCQIE3URhEvewjyqlE:hKBRqQoV4J8/9IF4FAZ5VdeTM0ZFG3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
PMS.Manage.dll

Files

PMS.Manage.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\net\PMS\PMS.Manage\obj\Debug\PMS.Manage.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 4.6MB - Virtual size: 4.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 880B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ