c:\Windows\Microsoft.NET\Framework64\v4.0.30319\Temporary ASP.NET Files\root\6cfba526\5d28cd39\App_Web_w4yqcpld.pdb
Static task
static1
Behavioral task
behavioral1
Sample
a1a22958833a29315d324449b8ab371e6c311112674ee71d20b2ab9689f4f994.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
a1a22958833a29315d324449b8ab371e6c311112674ee71d20b2ab9689f4f994.dll
Resource
win10v2004-20240319-en
General
-
Target
a1a22958833a29315d324449b8ab371e6c311112674ee71d20b2ab9689f4f994
-
Size
19KB
-
MD5
af81c692569baf38f0182a5f6bdf59d6
-
SHA1
5ea98c7276133c014c7260a3bb767eaec88a2636
-
SHA256
a1a22958833a29315d324449b8ab371e6c311112674ee71d20b2ab9689f4f994
-
SHA512
6da1f20ee73f3c5244cfb6834a6a1f60e02eb17b6392f3f54706bdf36cf186b197650ceaa2a7e8b1ddf0f4dc1d43e03e21876b16e6d8a97ccb6386ceaf7a4a04
-
SSDEEP
384:bAXvXE23Zgm3c3nAKKywEaVDdLzhakdGAt7n:fm6AvZdL1tGARn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a1a22958833a29315d324449b8ab371e6c311112674ee71d20b2ab9689f4f994
Files
-
a1a22958833a29315d324449b8ab371e6c311112674ee71d20b2ab9689f4f994.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
mscoree
_CorDllMain
Sections
.text Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 504B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ