D:\wangjx\project\.net\HGSOMS\Client\LIMS.Client.TMS.Fnc\obj\Debug\LIMS.Client.TMS.Fnc.pdb
Static task
static1
Behavioral task
behavioral1
Sample
LIMS.Client.TMS.Fnc.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
LIMS.Client.TMS.Fnc.dll
Resource
win10v2004-20240802-en
General
-
Target
LIMS.Client.TMS.Fnc.dll
-
Size
696KB
-
MD5
31f895249a3728f03b3a64eac205840b
-
SHA1
52d4d910aedfa8b7697c376176f89a81c022aea6
-
SHA256
072d08c974e09591afeee8b19d61c584d0b3855be6f341847fae7d315f79f86a
-
SHA512
52b7723690ef1d360214073f2b4e90fbe17a969f30a966217160411304989e8d093bfbbd006218a716ff7444873cc55c302f432ce4395e1025e61e7c4bbec62c
-
SSDEEP
6144:FBNBYyz6wnoen6hAzB5HVUbldcInx0/NwGQkdJGN1nzMQ+6x3FfFFnKxe4uZ:Fz6NT0+GQkdJGN1zxxVfFFnMV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource LIMS.Client.TMS.Fnc.dll
Files
-
LIMS.Client.TMS.Fnc.dll.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB Paths
Imports
mscoree
_CorDllMain
Sections
.text Size: 694KB - Virtual size: 694KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 1004B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ