c:\Windows\temp\utm9ks1t.pdb
Static task
static1
Behavioral task
behavioral1
Sample
c9f412e7d3b7628120b6de5d852a7b34dbe7ab3c337201dddc9d1d2a374788e2.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c9f412e7d3b7628120b6de5d852a7b34dbe7ab3c337201dddc9d1d2a374788e2.dll
Resource
win10v2004-20240412-en
General
-
Target
c9f412e7d3b7628120b6de5d852a7b34dbe7ab3c337201dddc9d1d2a374788e2
-
Size
6KB
-
MD5
d2b7dcb089f44e6d7dcd6eedd013fd95
-
SHA1
62abdfed9bafe90a1b25ff8a8df079296d1074aa
-
SHA256
c9f412e7d3b7628120b6de5d852a7b34dbe7ab3c337201dddc9d1d2a374788e2
-
SHA512
5fa139aecbd8cff2d98315cff2c6a9b8ce8b2f1541e6c7ba12eb458acd5985214d0f94cfb59ee88478669397e61ed91609169f666c79861bad67aa5694ce2ce8
-
SSDEEP
96:OH+lj9YDhx/cHyTqc8AUbCC+Arz8835OEUOBOJob4w9YdmK:OHQYb/ZuF2A88JLuLko
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c9f412e7d3b7628120b6de5d852a7b34dbe7ab3c337201dddc9d1d2a374788e2
Files
-
c9f412e7d3b7628120b6de5d852a7b34dbe7ab3c337201dddc9d1d2a374788e2.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
mscoree
_CorDllMain
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 680B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ