Static task
static1
General
-
Target
NBTModel.dll
-
Size
54KB
-
MD5
4f6755f0adcceceebdf45c056b5a885a
-
SHA1
e88411cc6b8faf231266317b5d0c4dd2db58c994
-
SHA256
482a8f6810c8d2b659fcf313bea15e914b54923f9cfe5d0a11508cd16c81aeae
-
SHA512
6b7c0da0f75f13d6e631779f2dfac027c8e868c04a124bca675ec3d3bcf30d88ff5e837fd6280c8940b0d2814b6b35b8198de36e0bf5bc17d191ba17d917202d
-
SSDEEP
1536:I8GG0amIS9VvPtEIGwjqKA9WxQtSv8Ce7:7S9BwSAO+h7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NBTModel.dll
Files
-
NBTModel.dll.dll windows x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorDllMain
Sections
.text Size: 52KB - Virtual size: 51KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 888B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ