Static task
static1
Behavioral task
behavioral1
Sample
NITGEN.SDK.NBioBSP.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
NITGEN.SDK.NBioBSP.dll
Resource
win10v2004-20240426-en
General
-
Target
NITGEN.SDK.NBioBSP.dll
-
Size
84KB
-
MD5
7cc061216ee81914dc723eed3466e59c
-
SHA1
33e4900f854e3e8b254995e64e1902f033ac7a14
-
SHA256
58e2843c860b1ac714aee9245b9100c89c61ef167b3c5c175c9a9a0bbba896e2
-
SHA512
b5bb80d72341b28ec775341c8f616f7366fd2e8a17e3be032c125afc8ace226451e1249a6f2dd59de1398c62523a1e225992854aba92faa0d7cfb3dbaeb89abc
-
SSDEEP
768:sEnMgV04KBWBI4LRTTRMDq9dvwALF8kmFwWgyGfbBvmbI3tyFz:hM47G4LRTemwyF8kmFGyGz5mbIy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NITGEN.SDK.NBioBSP.dll
Files
-
NITGEN.SDK.NBioBSP.dll.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 72KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ