C:\Users\nonam\Downloads\mod\testplate\obj\Debug\netstandard2.1\StupidTemplate.pdb
Static task
static1
Behavioral task
behavioral1
Sample
sagesmod (2).dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
sagesmod (2).dll
Resource
win10v2004-20240221-en
General
-
Target
sagesmod (2).dll
-
Size
31KB
-
MD5
918216a443ff3aef49b63a16f099c57b
-
SHA1
bf890179b5519be32863064a47da992567d2e9c1
-
SHA256
0ddffb1d9f2a4db01d0edc4e18d136c8feea23ebce27c0b1df9ed579ae4f4074
-
SHA512
3de48245d7e578088f19cc32291226f3fc65263e339852149a01a25447dacdb70f8329eb3cb5db99cb9b5bb05ccb02d27e65c7925d7fbd1e70dc05cd2ea78990
-
SSDEEP
384:GBlZb8voq/hledBy7TNNaBGeuAKUZmJmnjMff7Fy2iWm6VZaqtVXLWTlJj3mxjVW:qqYuPabDNdnjOf7DTmqMqtVKn2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource sagesmod (2).dll
Files
-
sagesmod (2).dll.dll windows:4 windows x86 arch:x86
Password: weeewoooo
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB Paths
Imports
mscoree
_CorDllMain
Sections
.text Size: 29KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 856B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ