/Users/ricky/development/personal/ini-parser/src/IniFileParser/obj/Release/INIFileParser.pdb
Static task
static1
Behavioral task
behavioral1
Sample
INIFileParser.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
INIFileParser.dll
Resource
win10v2004-20240221-en
General
-
Target
INIFileParser.dll
-
Size
28KB
-
MD5
2e77f841dbf271fd1ffc460bfd87a1d5
-
SHA1
18125861f0519cdf643560c0a988bf70c87d47b3
-
SHA256
f81ba0dd987d46a67b1879ef4ee11c14f32940ff211eace347a68e42bf272554
-
SHA512
556e4133d28935c13d93e5190178804b13c98334332316ced50b878f35730b92c62f0440f1c2e1bc3f5c36eaeced5ca794cd2fdf9ad5434af6194940aed0e346
-
SSDEEP
768:3FBulP+gma9/YzvPtAlzIzlpAuJa2kIhW9:1B8yaWzvPtpAEa2kSQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource INIFileParser.dll
Files
-
INIFileParser.dll.dll windows:4 windows x86 arch:x86
Password: infected
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB Paths
Imports
mscoree
_CorDllMain
Sections
.text Size: 26KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 936B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ