C:\Users\Auros\Documents\Programming\GorillaTag\Bepinject\Bepinject\obj\Release\netstandard2.0\Bepinject.pdb
Static task
static1
General
-
Target
Bepinject.dll
-
Size
15KB
-
MD5
780906a1c737b556afdb291d1c85839a
-
SHA1
93cc03a80d5cd996bd0b170de9c1f9d9c5a8704f
-
SHA256
b7320856a7faf7bf116dadbfca46278bf2584fcdb819d4e3ad4d68f89086cca8
-
SHA512
dfa7ee3854ac8b304412a6c4baf163b41c7ddcb9351efeb2ca6e9bd513af5ca27e87fbc7c52be8a0abfe7a1d9ab175ac3a4fa28baeeb02b438271f868d6a23c5
-
SSDEEP
384:EivYHX4gdPBkIttI4N4tC13A+Fvfi8aaeaWRWhm:gPBkItGQ9RFvq1aWohm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Bepinject.dll
Files
-
Bepinject.dll.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB Paths
Imports
mscoree
_CorDllMain
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 796B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ