c:\Windows\Microsoft.NET\Framework64\v4.0.30319\Temporary ASP.NET Files\root\8c7720f4\1c505455\App_Web_5ypzk0pt.pdb
Static task
static1
Behavioral task
behavioral1
Sample
6b583f257b82d5ee51bd0bbd91f12500411aad8daef8fbfec7a4903b59b3a944.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
6b583f257b82d5ee51bd0bbd91f12500411aad8daef8fbfec7a4903b59b3a944.dll
Resource
win10v2004-20240226-en
General
-
Target
6b583f257b82d5ee51bd0bbd91f12500411aad8daef8fbfec7a4903b59b3a944
-
Size
11KB
-
MD5
edb99fac3501632e93d665ba47b6eb4b
-
SHA1
5abf9c61fec8576098e2ffd456ac06abdcfde699
-
SHA256
6b583f257b82d5ee51bd0bbd91f12500411aad8daef8fbfec7a4903b59b3a944
-
SHA512
243f1f07dbf81992e355f9b52c61c35a3585e95516140b19fb17f304bc0a22b3dd3f0c09e73c8ec6e95fbd6fd1edf5530a97d87103a3001ce11d6c57cfff28eb
-
SSDEEP
192:+UpU1U0D0lqXhrHbggSzcfVasYtbFY5XwbMnhbU8b:nU1KQRr7gdzcfVasYt4Xv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6b583f257b82d5ee51bd0bbd91f12500411aad8daef8fbfec7a4903b59b3a944
Files
-
6b583f257b82d5ee51bd0bbd91f12500411aad8daef8fbfec7a4903b59b3a944.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
mscoree
_CorDllMain
Sections
.text Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 504B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ