LIMS[.]Client[.]TMS[.]Biz[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

LIMS.Client.TMS.Biz.dll
Size

735KB
MD5

0446e651858133b46bd0dd6eb57e59fb
SHA1

96d25f5e09a0dd6c0ec957a50d4303c665320480
SHA256

383994bef454633fbbb0b50ac5a43503c7f9954e9585d6b9a116ff1c6d1cb449
SHA512

63485f4fbf8d0158fa0243158645da77216075933d756251de22ff50f5c74050b0237644aa43ce852ebc47f8f38d1b0cd09c0ed2afc4bb6335532fab89ba79f7
SSDEEP

6144:Q7GlUiQSHRJ3qk7eHPGBB6trUIc4k5mGavvGpdmisJ7PHyo8kLQDPD3u//ZM6lYQ:2PSYlrZcsFj7PHyo8kLQTLu//NlYdY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
LIMS.Client.TMS.Biz.dll

Files

LIMS.Client.TMS.Biz.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\wangjx\project\.net\HGSOMS\Client\LIMS.Client.TMS.Biz\obj\Debug\LIMS.Client.TMS.Biz.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 733KB - Virtual size: 733KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1004B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ