C:\WINCE700\TmLib\substance\dotNET\btFileLibNet\btFileLibNet\obj\Release\btFileLibNet.pdb
Static task
static1
Behavioral task
behavioral1
Sample
btFileLibNet.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
btFileLibNet.dll
Resource
win10v2004-20240426-en
General
-
Target
btFileLibNet.dll
-
Size
11KB
-
MD5
5a2cb788a49c43ce36fb97cdb5c71a75
-
SHA1
6a696f73dd7746059b31d518ab6c72a9e62bad23
-
SHA256
9aa610c46c6eb45714226ad7e0025f1edaae54095b3d1f66845cc1c57e5e81fa
-
SHA512
d6d79e14e0e3ff97a07c62bd3832c3536dcc2f41d006a6ab3bbae88945b5f610031731e0e75ee1041d8ed84ffaadb0c618e93e938e7f29ef13bc65fd13da2cde
-
SSDEEP
192:3oOoD0P5+Laq2RXynvZhUXQ/Wb87OooKy6e5PkYItVOF:3o14PSaq2RXynvc2WbvKy6wPktVOF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource btFileLibNet.dll
Files
-
btFileLibNet.dll.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
mscoree
_CorDllMain
Sections
.text Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ