Dctech[.]PDADll[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Dctech.PDADll.dll
Size

195KB
MD5

dc8e0e3a5f03ba1ae3993a1dd4d1051f
SHA1

4dfcdcdf20e6c2aadc59d78f5686799dab1dd7a3
SHA256

bf16aabffdfa15001fc83816d5f64588df3f9ade32b28269989e0ccc8fe902fa
SHA512

70615a6c640c5feef84af4342fbbce569c486ea8f3c47b37e1f8c7ca99c035fa204d98e366ee5113712f3c4214e8e1078e983769349aed655860dd23bbb41b29
SSDEEP

3072:rvMJKF6HYX138opnQo+Ltm/PYBwmLtvH/4KtsPlDwMnoX6bapk+rx/XhDDg:9F6HYF3LwQMx/DD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Dctech.PDADll.dll

Files

Dctech.PDADll.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

E:\项目\讯捷物流\新系统开发中\NewSourceCode\Dctech.PDADll\obj\Debug\Dctech.PDADll.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 193KB - Virtual size: 193KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 920B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ