c:\Windows\Microsoft.NET\Framework\v2.0.50727\Temporary ASP.NET Files\root\06da6aeb\95140f79\App_Web_pkezt8x_.pdb
Static task
static1
Behavioral task
behavioral1
Sample
f7af2d22916d7517ccae9c2e50141f475c261f318fe4cae48254f0c79fe2d931.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f7af2d22916d7517ccae9c2e50141f475c261f318fe4cae48254f0c79fe2d931.dll
Resource
win10v2004-20240412-en
General
-
Target
f7af2d22916d7517ccae9c2e50141f475c261f318fe4cae48254f0c79fe2d931
-
Size
216KB
-
MD5
1eb631aa52d55884950d00cd97b0162b
-
SHA1
589c876aed2fc0faf16200c5054f3f4c7d7a79c0
-
SHA256
f7af2d22916d7517ccae9c2e50141f475c261f318fe4cae48254f0c79fe2d931
-
SHA512
6b9d392f608d64852de05a708d2f47934763d14970109a45c416a7e477ab502c5a333a0dbb46f5bcc1d490dd8fa33d3113c199989bf99c940e0d236084d3f7d8
-
SSDEEP
3072:x+g+rTTPZ778f4XSJMT+qsyGQUeiXUyWmrj0uUO/witmAZsF1i9LC8YqO:gxXsUO/wvF1QFO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f7af2d22916d7517ccae9c2e50141f475c261f318fe4cae48254f0c79fe2d931
Files
-
f7af2d22916d7517ccae9c2e50141f475c261f318fe4cae48254f0c79fe2d931.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
mscoree
_CorDllMain
Sections
.text Size: 120KB - Virtual size: 119KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 88KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ