C:\Users\canopus\source\repos\TheGame\obj\Release\net8.0\win-x64\TheGame.pdb
Static task
static1
Behavioral task
behavioral1
Sample
TheGame.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
TheGame.dll
Resource
win10v2004-20240226-en
General
-
Target
TheGame.dll
-
Size
40KB
-
MD5
21ac344603123fb74f96c043a1a6538e
-
SHA1
b0d7e7eb914005993b3aa6787c8e7a3df45382f0
-
SHA256
b1a03b23fb62b92626e261401d564b1986abf898df449b5180e9facd7dba7406
-
SHA512
cbcf3ff5a3dc98518103784e2e706bdbc15512283569aa62362a7fd20d940a5c79f92e6ad917add37ffb8f0b14c22de2f464b28794a7800018cc20c82063e67a
-
SSDEEP
768:hOouuuJyUFlY4i4cJPxUMAdAL4o65/uVrf:h3uuugULY4i4cJ5UMAdAL4z/o
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource TheGame.dll
Files
-
TheGame.dll.dll windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB Paths
Sections
.text Size: 28KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 888B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 48B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ