BZOA[.]BLL[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

BZOA.BLL.dll
Size

6KB
MD5

0a7a973058c7dc640e0f740196029b03
SHA1

260f4f43f4d73be02cd359a3e296e19c3c6ce761
SHA256

edef2d5b514f2e4dd894d02120f4b9cd7cc8a0556dc04fd01d4525b48e45b7ce
SHA512

4dd30f9c78ce0902250b1d4f2828511ea732576e8fc8a57fb0dab655901ab486aecd4b80b1a31811389b9b313a0e80c0785ed3782ec9becf5a8c5266c8a24f11
SSDEEP

96:5IZTvlzXs321OBUCDSrEht/wtn3LvvAvw6fAbLO5DcZWyh:YD2321OBUQYn3rvP5ZZWI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
BZOA.BLL.dll

Files

BZOA.BLL.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

E:\项目\YHOA_V2\BZOA.BLL\obj\Debug\BZOA.BLL.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 924B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ