C:\V7Relese\trunk\Source\Entity\Ctr_nmeraEntity\obj\Release\Entity.Ctr_nmeraEntity.pdb
Static task
static1
Behavioral task
behavioral1
Sample
5115268aeabff93831ee874284415499cb09ace1d042788c46ce0d85894b2fa8.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
5115268aeabff93831ee874284415499cb09ace1d042788c46ce0d85894b2fa8.dll
Resource
win10v2004-20240412-en
General
-
Target
5115268aeabff93831ee874284415499cb09ace1d042788c46ce0d85894b2fa8
-
Size
14KB
-
MD5
896569aad24bb40db2db31a0dd646ee1
-
SHA1
00487b71a5b8f65b800d11e5038299f9f3f0c6a6
-
SHA256
5115268aeabff93831ee874284415499cb09ace1d042788c46ce0d85894b2fa8
-
SHA512
dfecc033a8922f49ddf53c47de8b876f1722b23d326492ac91c63fa80f486102d0b60a6f88dc610339aa92002023c7d6decb6920503ab68b17be2ada167e9e2a
-
SSDEEP
192:WLdDiW8J12YEVOEOYGGuFhZVinlYJL/eV/9NIDLTmKSZuSR:WLNifCYEMEfuh5qF/+LT9S5R
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5115268aeabff93831ee874284415499cb09ace1d042788c46ce0d85894b2fa8
Files
-
5115268aeabff93831ee874284415499cb09ace1d042788c46ce0d85894b2fa8.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
mscoree
_CorDllMain
Sections
.text Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 512B - Virtual size: 312B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 968B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ