C:\actions-runner\_work\universal\universal\src\Host\obj\Release\netstandard2.0\win7-x64\host.pdb
Static task
static1
Behavioral task
behavioral1
Sample
entry_1_0/host.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
entry_1_0/host.dll
Resource
win10v2004-20240226-en
General
-
Target
file_b5bc4c03b90748ebacc9b04ee263aad0_2024-04-19_08_37_02_562000.zip
-
Size
42KB
-
MD5
4400d6f3ad77b7d0e863b7fa2db7f99c
-
SHA1
68de0d464d197f5064e6526e8d068b4377a6234e
-
SHA256
ccb1df49aaff91ffa8a7ff0a970866cc792f4cd244192d24459e26119fcc6248
-
SHA512
e82548b22d7a2daa4a1d34e744f053b708cc72d57d18eb9b2df937a831e72b1e142f4a36512fdbae84138add2007aeb8fe7fbce18bbb2cf4d86098977158b60d
-
SSDEEP
768:Mzp27VSA1sb/Jaf6hk6KRE4wWaHUptMfpo/xlRc/+iZu5xsBtWmd8FfDsg7:Mzp2VSAyJ5kzR2WRMBo/x/cX1QS8pP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/entry_1_0/host.dll
Files
-
file_b5bc4c03b90748ebacc9b04ee263aad0_2024-04-19_08_37_02_562000.zip.zip
-
entry_1_0/host.dll.dll windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB Paths
Sections
.text Size: 101KB - Virtual size: 101KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 756B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
manifest.json