bitsprx3.pdb
Static task
static1
Behavioral task
behavioral1
Sample
bitsprx3.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
bitsprx3.dll
Resource
win10v2004-20240226-en
General
-
Target
bitsprx3.dll
-
Size
14KB
-
MD5
b647d6f0a7647484d8d78f0b0c520546
-
SHA1
47d0ddf6e2d811cb45559e2c73c28244715af94f
-
SHA256
2303c5d3284601402c12007d69b0106ba9654ff7ea76a07cd69be70e04c445f2
-
SHA512
3ad9f91b5df606f485192df1a621fe70b39b779d0fbe989df0d503d132a1e5bce533b24233d53c4eba3ad82181051c5e2628d23a82fd6293f98a73b81218960b
-
SSDEEP
192:yyXAzlPFfTMzpXR9uxspcZpQL3VfHABG2XipbOoO7SA9Z+MWC0WocXTq:y9Mzp/sZyL3BiGA9nWC0WocXTq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bitsprx3.dll
Files
-
bitsprx3.dll.dll regsvr32 windows:6 windows x64 arch:x64
0f25837f90083962dbf53c6c5a150157
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB Paths
Imports
msvcrt
__C_specific_handler
_initterm
malloc
free
_amsg_exit
_XcptFilter
memcmp
rpcrt4
NdrDllGetClassObject
NdrDllUnregisterProxy
IUnknown_QueryInterface_Proxy
NdrOleFree
NdrStubForwardingFunction
NdrOleAllocate
IUnknown_Release_Proxy
IUnknown_AddRef_Proxy
NdrStubCall3
NdrDllCanUnloadNow
NdrDllRegisterProxy
NdrCStdStubBuffer2_Release
combase
ord5
ord32
ord6
ord33
ord34
kernel32
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
GetTickCount
GetSystemTimeAsFileTime
GetCurrentThreadId
Sleep
QueryPerformanceCounter
GetCurrentProcessId
DisableThreadLibraryCalls
Exports
Exports
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Sections
.text Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.orpc Size: 512B - Virtual size: 142B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 512B - Virtual size: 252B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 336B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ