OpenApiBLL[.]dll | Triage

Sharing

General

Target

OpenApiBLL.dll
Size

56KB
MD5

14c3dd5f32ea48a59b091a0187b7a2e8
SHA1

6391082b651f677ba8e82ea5e72f33882ee1b309
SHA256

88a26ce9ffa3a1ab5a5fda003f66ae04b2de6fc084cc570b8266ca1b64fc8be2
SHA512

6a035d7e463ec8d5da4e88ce0b8f4b43aa343ba635d49ec294eb54fb9f731d2915b0aa0c471d27c5a56765721f4dfd6d523f73051840c58762df179ff1da21cf
SSDEEP

1536:ooeQWCQauJGFEauIFTF44wEQaDuFAugLRquh+z:/e7sGbQTWkuFAfLRt+z

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
OpenApiBLL.dll

Files

OpenApiBLL.dll
.dll windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\code\C#SDK-3.1.0\OpenApiBLL\OpenApiBLL\obj\Debug\OpenApiBLL.pdb

Sections

.text
Size: 54KB - Virtual size: 54KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 904B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ