c:\Windows\Microsoft.NET\Framework\v4.0.30319\Temporary ASP.NET Files\root\49dd0163\1afe179b\App_Web_oavx5s5t.pdb
Static task
static1
Behavioral task
behavioral1
Sample
1b17ab1c0ab0a3c8494940411bdb28ebc8a12041a03360be152a85c47d3f737c.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
1b17ab1c0ab0a3c8494940411bdb28ebc8a12041a03360be152a85c47d3f737c.dll
Resource
win10v2004-20240226-en
General
-
Target
1b17ab1c0ab0a3c8494940411bdb28ebc8a12041a03360be152a85c47d3f737c
-
Size
116KB
-
MD5
ac4477662e79ed814666ea32866c9f17
-
SHA1
0aa864c5eeed82eabf42039487eb713070c522e4
-
SHA256
1b17ab1c0ab0a3c8494940411bdb28ebc8a12041a03360be152a85c47d3f737c
-
SHA512
6b678c648b91c4c76deb768715c47d8009a1ae035ccc1f54f849466e761cb7483a34d44abf31c8f865669425756624349f175fe5c8d83cb5c50a2790c750732d
-
SSDEEP
3072:ao1mxtN2W8P6KXSJMT+mzMfU4Fm1MyWmri4HzXN6gej:aoqtNu1To
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1b17ab1c0ab0a3c8494940411bdb28ebc8a12041a03360be152a85c47d3f737c
Files
-
1b17ab1c0ab0a3c8494940411bdb28ebc8a12041a03360be152a85c47d3f737c.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
mscoree
_CorDllMain
Sections
.text Size: 101KB - Virtual size: 100KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ