BITLogix[.]NPI[.]API[.]CLL[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

BITLogix.NPI.API.CLL.dll
Size

27KB
MD5

ce78d516ff5edda2b96520765f4fb825
SHA1

e262e9383ba5070902d66501d8e825d903b087d4
SHA256

97ebeee8ae5a33554462eacaabe70fa3906012dbe085229b8a71cc96ce7194be
SHA512

3cbef93dce3f0788e8f1d62db5fa573c82211c689a792fc532e7ba054a08f7c0976e197d4a8c55adde99ac986f7e76ee8529380057fbe4c0216dc7b75a72fd7b
SSDEEP

384:AtGUXOjpZPwFYkqSIKJtlKnQlnr19wpW8w9efafrrAI/PSa16xmW2:AtB0oF5qSHDlK4cS9I+rdKItW2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
BITLogix.NPI.API.CLL.dll

Files

BITLogix.NPI.API.CLL.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\BitLogix Pvt Limited\Projects\NexusProIntegrations\BITLogix.NPI.API.CLL\obj\Release\BITLogix.NPI.API.CLL.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 984B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ