BITLogix[.]NPI[.]Core[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

BITLogix.NPI.Core.dll
Size

77KB
MD5

fa04457530b9b9ef000da7d1ca3a714e
SHA1

40cb48223ce9d5f8da046fb3ee9c15b353a45038
SHA256

2e8197d2efd04a69bc473e906501841741922a7368f43b7e0fe9c324f5807fba
SHA512

a581aa77d280d685620f63c5a3903267d6be31e7d9cc1700883f2cc16a823ec531906bedf0f10de283472133f39750f610297b6323f30e53b4eb04c95ad7d2b6
SSDEEP

1536:gt8TExyu/yhB/HMSjZxBA0GPWC0D/cZy:gt017MSjZPGOOy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
BITLogix.NPI.Core.dll

Files

BITLogix.NPI.Core.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\BitLogix Pvt Limited\Projects\NexusProIntegrations\BITLogix.NPI.Core\obj\Release\BITLogix.NPI.Core.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 75KB - Virtual size: 75KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 952B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ