c:\Users\Linky\AppData\Local\Temp\fosxqbh9.pdb
Static task
static1
Behavioral task
behavioral1
Sample
f0927d2b8c8830e6ba9a526711a4d56a.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f0927d2b8c8830e6ba9a526711a4d56a.dll
Resource
win10v2004-20240226-en
General
-
Target
f0927d2b8c8830e6ba9a526711a4d56a
-
Size
3KB
-
MD5
f0927d2b8c8830e6ba9a526711a4d56a
-
SHA1
9b0f388fa1ce512ea2d30ee687934270a6757ce2
-
SHA256
71c4725d74006eefabb334e9da1b912cf9e69a98f5f70523b841419a6770672a
-
SHA512
545472cfa472c6614d67bd20f1e0835f1baebea08c84ff2c031ca7d7a5f485e47b6c8b72f1e943d81c5ca2670bb5c80827e6b19667edd3a720e9445b2b85e226
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f0927d2b8c8830e6ba9a526711a4d56a
Files
-
f0927d2b8c8830e6ba9a526711a4d56a.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
mscoree
_CorDllMain
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 680B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ