c:\Windows\Microsoft.NET\Framework\v2.0.50727\Temporary ASP.NET Files\root\97109801\6daf76a3\App_Web_fh_8reap.pdb
Static task
static1
Behavioral task
behavioral1
Sample
b98b4fdb8b67475267ae8f54919ef8066fd2b89395e6d350de01050d87269829.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b98b4fdb8b67475267ae8f54919ef8066fd2b89395e6d350de01050d87269829.dll
Resource
win10v2004-20240412-en
General
-
Target
b98b4fdb8b67475267ae8f54919ef8066fd2b89395e6d350de01050d87269829
-
Size
180KB
-
MD5
fb1c696eb1da2cf0148283ca4e521e2e
-
SHA1
c489ff88690130c3a5d785279eccc9c403df06b2
-
SHA256
b98b4fdb8b67475267ae8f54919ef8066fd2b89395e6d350de01050d87269829
-
SHA512
b9731a814f6eb4073510e4b98e66c4a4ea9c9e80e8e4e683b39461aa5aa144f88d032db797994541f98be9e75d61650e5382114b0c5af110b21199b993d01db4
-
SSDEEP
3072:siB3XWfggVXSJMT+dsyZQUeiXUyWmrjelqqqjqL:dPgVx1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b98b4fdb8b67475267ae8f54919ef8066fd2b89395e6d350de01050d87269829
Files
-
b98b4fdb8b67475267ae8f54919ef8066fd2b89395e6d350de01050d87269829.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
mscoree
_CorDllMain
Sections
.text Size: 156KB - Virtual size: 155KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ