BZOA[.]Model[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

BZOA.Model.dll
Size

1009KB
MD5

bcec709b60f4ad208e72c8baf66bfe8a
SHA1

aa07870634fe5c3b4f74122d2954e349ed44570b
SHA256

389ab1eb04b894b150d4fae81eefc9a8f75d4cf1d986030f6b91aeaa42291644
SHA512

5ffab65c019f521431d5e1a4a1656be718bc170acff39deb2a45f6ddf6cf0a6f8c9e933215954f140adad7a905ac56e48f5bc6413561c72ee761a15dbc4844e7
SSDEEP

12288:OUoOHyCSkNEe0VEQGVd5/LAdztdma/jesIAlNP:/HLSDGGzPBf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
BZOA.Model.dll

Files

BZOA.Model.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

E:\OA备份文件\NewOA2\BZOA.Model\obj\Debug\BZOA.Model.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 1007KB - Virtual size: 1007KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 940B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ