GxBaseBuilder[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

GxBaseBuilder.dll
Size

104KB
MD5

2090a9d4f7fe38c601533b5c8dc7c668
SHA1

c006d0c3de96144b6768757fd849076325ec0c3f
SHA256

729d5484fb0d4d3a9aa1e95be4175fc33cb5a774483b1c2ccbaf23a38cb4a0ed
SHA512

64ecbd60e4247b50b318bf532831df000c1f8a3b45ec203a0bd0f899329161a4e0e35ea18c09ff826a0e9b5e4c591692b30f865b3a9c3f214727b7fc00cdba42
SSDEEP

3072:Tf1/qh7k7jLrSBk7ElHG9FZpTO9lnEsVs:r1Ch7knLr/GV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
GxBaseBuilder.dll

Files

GxBaseBuilder.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 92KB - Virtual size: 89KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ