C:\Users\b946sk\AppData\Local\Temp\Temporary ASP.NET Files\root\7c216fe1\78c1439d\App_Web_e5dpadwt.pdb
Static task
static1
Behavioral task
behavioral1
Sample
57b26bf7600dbf7898d94ef987546590.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
57b26bf7600dbf7898d94ef987546590.dll
Resource
win10v2004-20240226-en
General
-
Target
57b26bf7600dbf7898d94ef987546590
-
Size
844KB
-
MD5
57b26bf7600dbf7898d94ef987546590
-
SHA1
61a5282e8c2d940445999094df98c9c73a755d2a
-
SHA256
e4811381514248051c02fe3883c0a44561798b5ee4741d6b6760feebd4367d55
-
SHA512
3cd4ad3bf7727b71391ecc7ebb9acbc090de823932952bf36f249628f529d43a467facefbf9001b78d6cdab61a90a7d8512f475a281918f9bf8f3bb5a28be6fa
-
SSDEEP
3072:ruoarNhCeAyAkbVYVTbK3KoKcgOBIIJzZcRCFfIpwqkMa2NtVe71MJlNqfxWfWA8:iZqU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 57b26bf7600dbf7898d94ef987546590
Files
-
57b26bf7600dbf7898d94ef987546590.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
mscoree
_CorDllMain
Sections
.text Size: 840KB - Virtual size: 839KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 512B - Virtual size: 312B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ