c:\Windows\Microsoft.NET\Framework\v4.0.30319\Temporary ASP.NET Files\root\49dd0163\1afe179b\App_Web_cjrghlqx.pdb
Static task
static1
Behavioral task
behavioral1
Sample
442e757594941cbbf11eac9069a4558546ea2c019d8e5b2f78bc64b5341259aa.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
442e757594941cbbf11eac9069a4558546ea2c019d8e5b2f78bc64b5341259aa.dll
Resource
win10v2004-20240419-en
General
-
Target
442e757594941cbbf11eac9069a4558546ea2c019d8e5b2f78bc64b5341259aa
-
Size
116KB
-
MD5
c4937d44b12249c16646e69e3326fc72
-
SHA1
091bae89ef12f11e7c73748fd7d1d582c94fd73f
-
SHA256
442e757594941cbbf11eac9069a4558546ea2c019d8e5b2f78bc64b5341259aa
-
SHA512
746bcec832cfbf4426f0bf29ce6cf64d82c5034671df785dac01573d62a24b6a66ddc2ea000f57f1afd07d221e40f854f81bb945373aaf5affaf6cd29e9aa3f7
-
SSDEEP
3072:ho1mxtN2W7P6KXSJMT+mzMfU4Fm1MyWmri4HmXg6gej:hoqtNb1G9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 442e757594941cbbf11eac9069a4558546ea2c019d8e5b2f78bc64b5341259aa
Files
-
442e757594941cbbf11eac9069a4558546ea2c019d8e5b2f78bc64b5341259aa.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
mscoree
_CorDllMain
Sections
.text Size: 101KB - Virtual size: 100KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ