LIMS[.]Client[.]WorkFlow[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

LIMS.Client.WorkFlow.dll
Size

63KB
MD5

64f8199826f6add01a52b5e55168af2a
SHA1

9b09c16a44e8b3596681fd0706897d9a95635286
SHA256

8f5ea786f88063ebdb277e91060307845c2acc239f141e4708432d7005077bb4
SHA512

09134347196529d1c01589bc68a0338e78c32b01a302a94d723af75e03f7ffa03c1abf50e20e9fceb4c761944fab3488bf76448e651c853aa2d516b2713b2d64
SSDEEP

768:BkKKYhmGy7o6sDXRCo/LXsKevFabZzvw9nOy/PiAPJboKvuFXwknIVg4LpC/A4eu:z2KLb5w9nOxD0Dkd9d9d9dc3m3m3m3d

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
LIMS.Client.WorkFlow.dll

Files

LIMS.Client.WorkFlow.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\wangjx\project\.net\HGSOMS\Client\LIMS.Client.WorkFlow\obj\Debug\LIMS.Client.WorkFlow.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 61KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1020B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ