C:\Users\Bruno\Projects\Unity\Development - VRCToggleAssistant\Assets\Code\obj\Release\net4.7.1\ToggleAssistant.pdb
Static task
static1
Behavioral task
behavioral1
Sample
5317cfd2bbf24f14e8465cf70476924a/asset.dll
Resource
win7-20240319-en
Behavioral task
behavioral2
Sample
5317cfd2bbf24f14e8465cf70476924a/asset.dll
Resource
win10v2004-20240226-en
General
-
Target
ToggleAssistant-0.12.0.unitypackage
-
Size
27KB
-
MD5
3ec2ac0bf2953420e3ee8aadc6978f32
-
SHA1
c4618699f41a97b0b0d7db0d4ebd36fa49c76015
-
SHA256
c69b55d35dfbf647d694dfa786986f0f9fcfdb769a884354c95002e9b7d19fca
-
SHA512
93c0da65f530d397cc48e8efd966c309c30a44982f09014c40549e0346e8c99332f6fa95c6a1afc588e090092583e95cac4a9cb5f6c82a72d3c048efc1d62041
-
SSDEEP
384:X15P1oWA73iK98Wgi40kXRhLPf7tZdH+qXypcR+W1G3lBOcVSMqgth5v3EzPTAii:Bonms89ibknY+ySRv1G/3VCgLFkjEz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack002/5317cfd2bbf24f14e8465cf70476924a/asset
Files
-
ToggleAssistant-0.12.0.unitypackage.gz
-
archtemp.tar.tar
-
5317cfd2bbf24f14e8465cf70476924a/asset.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB Paths
Imports
mscoree
_CorDllMain
Sections
.text Size: 62KB - Virtual size: 62KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 860B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
5317cfd2bbf24f14e8465cf70476924a/asset.meta
-
5317cfd2bbf24f14e8465cf70476924a/pathname
-
77f4cc0b3a326fe49b2726358a30b57f/asset
-
77f4cc0b3a326fe49b2726358a30b57f/asset.meta
-
77f4cc0b3a326fe49b2726358a30b57f/pathname