Com[.]Boshangyun[.]B9Server[.]Logic[.]dll | Triage

Sharing

General

Target

Com.Boshangyun.B9Server.Logic.dll
Size

569KB
MD5

869ec241e24a2ff2fe0a4b8df0db235e
SHA1

e10c9e7ae14df5e94ecc9ece5420b2106f2341d7
SHA256

1ba0023cc741f055461a6f2a580afcda98a3bbb568ebe55e2f4d2db48fdd9641
SHA512

03f7b0742e7adcacda67f9e0500e4ba026a201ba634976641be3e321ffbe68d03a6dad4a1d77f174ed783e1c2eb0ae344dbcc900ce84ca734fa88dc88f1d8930
SSDEEP

12288:lu45pNCk/PLJbeEzoN6ReD/QLPdezxFMgQsIkY:lPp87KlezovkY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Com.Boshangyun.B9Server.Logic.dll

Files

Com.Boshangyun.B9Server.Logic.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\BsyWork\Dev\B9-v4.x\B9Server\Common\Logic\obj\Release\Com.Boshangyun.B9Server.Logic.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 567KB - Virtual size: 566KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ