0fd3b77645313ce991693ac663f1bbf77a791c52e5e6abff8cb0e70b452b8e5e

Summary

Architecture IMAGE_FILE_MACHINE_I386
Subsystem IMAGE_SUBSYSTEM_WINDOWS_CUI
Compilation Date 2076-Jun-25 14:51:00
Debug artifacts D:\Projekte\DotNet\Device-Connector\Beterna.Bepos.DeviceConnector\obj\Release\net5.0-windows\Beterna.Bepos.DeviceConnector.pdb
CompanyName Beterna.Bepos.DeviceConnector
FileDescription Beterna.Bepos.DeviceConnector
FileVersion 1.0.0.0
InternalName Beterna.Bepos.DeviceConnector.dll
LegalCopyright BE-terna GmbH
OriginalFilename Beterna.Bepos.DeviceConnector.dll
ProductName Beterna.Bepos.DeviceConnector
ProductVersion 1.0.0
Assembly Version 1.0.0.0

Plugin Output

Suspicious Strings found in the binary may indicate undesirable behavior: Contains references to security software:
  • rshell.exe
Suspicious The PE is possibly packed. The PE only has 1 import(s).
Suspicious No VirusTotal score. This file has never been scanned on VirusTotal.

Hashes

MD5 3d5626321c6620e96cb11eba6c4be80a
SHA1 4ab836404c91583b1e420a877c5219abefc59ed4
SHA256 0fd3b77645313ce991693ac663f1bbf77a791c52e5e6abff8cb0e70b452b8e5e
SHA3 e20e2467c10a74497627d5b57d2bd6cb78b0990dcc68404da17f09280b8ecaed
SSDeep 3072:KtIRbvzyUFDc2ZXHtisvcgSbmSFfKzTFtqgTAn2eroU:dHnZdi0cZb3pC
Imports Hash dae02f32a21e03ce65412f6e56942daa

DOS Header

e_magic MZ
e_cblp 0x90
e_cp 0x3
e_crlc 0
e_cparhdr 0x4
e_minalloc 0
e_maxalloc 0xffff
e_ss 0
e_sp 0xb8
e_csum 0
e_ip 0
e_cs 0
e_ovno 0
e_oemid 0
e_oeminfo 0
e_lfanew 0x80

PE Header

Signature PE
Machine IMAGE_FILE_MACHINE_I386
NumberofSections 3
TimeDateStamp 2076-Jun-25 14:51:00
PointerToSymbolTable 0
NumberOfSymbols 0
SizeOfOptionalHeader 0xe0
Characteristics IMAGE_FILE_DLL
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Image Optional Header

Magic PE32
LinkerVersion 48.0
SizeOfCode 0x19400
SizeOfInitializedData 0x600
SizeOfUninitializedData 0
AddressOfEntryPoint 0x0001B22A (Section: .text)
BaseOfCode 0x2000
BaseOfData 0x1c000
ImageBase 0x10000000
SectionAlignment 0x2000
FileAlignment 0x200
OperatingSystemVersion 4.0
ImageVersion 0.0
SubsystemVersion 4.0
Win32VersionValue 0
SizeOfImage 0x20000
SizeOfHeaders 0x200
Checksum 0x23f91
Subsystem IMAGE_SUBSYSTEM_WINDOWS_CUI
DllCharacteristics IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
SizeofStackReserve 0x100000
SizeofStackCommit 0x1000
SizeofHeapReserve 0x100000
SizeofHeapCommit 0x1000
LoaderFlags 0
NumberOfRvaAndSizes 16

.text

MD5 2b48112e5047c9ea43e627c78ae3051a
SHA1 21a0825cc04267e75049e4b37696d173ce9d192d
SHA256 8f8b6a08aea3d3148fbe4fef5f1f9117741926e07d0d6d45d83c99d3f9a86a7e
SHA3 0edb1426caab2f341d6235ab490ea72978ca1f3e0eeff78087c0c30c5986ad98
VirtualSize 0x19230
VirtualAddress 0x2000
SizeOfRawData 0x19400
PointerToRawData 0x200
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Entropy 5.83581

.rsrc

MD5 23dcfda7c3f91055fe442be55ece28eb
SHA1 79e5565f555decd7eed42360922e6222cba2c8d7
SHA256 b37dabfb82a04363872689ff8b64c696aaa6955c719b0a8997fd4c7e9f989c21
SHA3 bb8fe37b18dca2f1883855b56241f05c082c323176837be352bb71f21851cffd
VirtualSize 0x3fc
VirtualAddress 0x1c000
SizeOfRawData 0x400
PointerToRawData 0x19600
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 3.15375

.reloc

MD5 124a899a37137ab61346f657c638e507
SHA1 b0f06829e03e2b1e4c0aa42e3ad8f73a947c2ea1
SHA256 57b94ebb4ccdb91f14ff79ea471fe262f867df4004b9840a907de857df887e6f
SHA3 b82cc568e20d8a179de581893eb03a0492261d7f2efd3cd944455f1eb9cead4f
VirtualSize 0xc
VirtualAddress 0x1e000
SizeOfRawData 0x200
PointerToRawData 0x19a00
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Entropy 0.10191

Imports

mscoree.dll _CorDllMain

Delayed Imports

1

Type RT_VERSION
Language UNKNOWN
Codepage UNKNOWN
Size 0x3a0
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.27003
MD5 cce44a65f4229ad2cfd8ce345ee66140
SHA1 634a37a9ebb2ba0cf00b4eb4e1e774f94d047ab1
SHA256 ab791b0a2f7df36a744d80e650162bf64674baf378f40e4b367801aab1dd38e2
SHA3 6058f4f636a5c7c717491064e99d9f0d5660c14f8a06057dbb28e0aa3023b66a

Version Info

Signature 0xfeef04bd
StructVersion 0x10000
FileVersion 1.0.0.0
ProductVersion 1.0.0.0
FileFlags (EMPTY)
FileOs VOS_DOS_WINDOWS32
VOS_NT_WINDOWS32
VOS__WINDOWS32
FileType VFT_DLL
Language UNKNOWN
CompanyName Beterna.Bepos.DeviceConnector
FileDescription Beterna.Bepos.DeviceConnector
FileVersion (#2) 1.0.0.0
InternalName Beterna.Bepos.DeviceConnector.dll
LegalCopyright BE-terna GmbH
OriginalFilename Beterna.Bepos.DeviceConnector.dll
ProductName Beterna.Bepos.DeviceConnector
ProductVersion (#2) 1.0.0
Assembly Version 1.0.0.0
Resource LangID UNKNOWN

IMAGE_DEBUG_TYPE_CODEVIEW

Characteristics 0
TimeDateStamp 2100-Nov-26 23:14:55
Version 256.20557
SizeofData 151
AddressOfRawData 0x1b118
PointerToRawData 0x19318
Referenced File D:\Projekte\DotNet\Device-Connector\Beterna.Bepos.DeviceConnector\obj\Release\net5.0-windows\Beterna.Bepos.DeviceConnector.pdb

UNKNOWN

Characteristics 0
TimeDateStamp 1970-Jan-01 00:00:00
Version 1.0
SizeofData 39
AddressOfRawData 0x1b1af
PointerToRawData 0x193af

UNKNOWN (#2)

Characteristics 0
TimeDateStamp 1970-Jan-01 00:00:00
Version 0.0
SizeofData 0
AddressOfRawData 0
PointerToRawData 0

TLS Callbacks

Load Configuration

RICH Header

Errors

Leave a comment

No comments yet.