c:\Windows\Microsoft.NET\Framework\v2.0.50727\Temporary ASP.NET Files\root\97109801\6daf76a3\App_Web_g2cbk0-a.pdb
Static task
static1
Behavioral task
behavioral1
Sample
c74e772bb26e0d62b328b59e130f731fde13a5e67f9f0602c1b734b56b200d80.dll
Resource
win7-20240319-en
Behavioral task
behavioral2
Sample
c74e772bb26e0d62b328b59e130f731fde13a5e67f9f0602c1b734b56b200d80.dll
Resource
win10v2004-20240226-en
General
-
Target
c74e772bb26e0d62b328b59e130f731fde13a5e67f9f0602c1b734b56b200d80
-
Size
180KB
-
MD5
4e65d3a626a0aa859f8acd9617be7ea7
-
SHA1
47ddd645b11e169b8438c017c4cbf6f79a5180a7
-
SHA256
c74e772bb26e0d62b328b59e130f731fde13a5e67f9f0602c1b734b56b200d80
-
SHA512
0d8ba021592fd7d83e80196d3985400f1ce9177d5f33f6088351c5f6a543ff81fa64ff1b87b18b0fbbbf441611e52f1365809a155d52d47981ba8a133c867e8c
-
SSDEEP
3072:/P5z7kxkbS7ZoVfgnXSJMT+dsyGQUeiXUyWmrje0xuq8qlq:/5kCbS7Zvnm0x
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c74e772bb26e0d62b328b59e130f731fde13a5e67f9f0602c1b734b56b200d80
Files
-
c74e772bb26e0d62b328b59e130f731fde13a5e67f9f0602c1b734b56b200d80.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
mscoree
_CorDllMain
Sections
.text Size: 156KB - Virtual size: 155KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ