SIGNUS[.]API[.]BLL[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

SIGNUS.API.BLL.dll
Size

132KB
MD5

adefd3ba4edcd7eeab57b71ddfe26683
SHA1

6e15297c20a3dd66e7750b6d840659fd1ce892b0
SHA256

e1920d0162b5452180900e520bcaa7950f71be071c84d442363b26a869fa58eb
SHA512

675896ddfe0ab5db6c1cf7ecff60f2707fff616c4a209cb7e960a6975cb40674a40786b314a048ad8358c8d309fb25a9afd9f244184f0f3ac1509933986db156
SSDEEP

3072:KOqTh6uQ4uhNVdJ5VeRbZXnXyg0GpM1EWnZ5V03Qpyh5NuoWRfcT2zviaR1:eThItHeRVX62SEWnHV03Qpyh5NuzfcWi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SIGNUS.API.BLL.dll

Files

SIGNUS.API.BLL.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\Novainfo\SIGNUS.API\SIGNUS.API.BLL\obj\Release\SIGNUS.API.BLL.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 130KB - Virtual size: 129KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 936B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ