C:\Users\user\source\repos\WindowsFormsApp34\WindowsFormsApp34\obj\Debug\WindowsFormsApp34.pdb
Static task
static1
Behavioral task
behavioral1
Sample
6c3c667bd6f212078f75ef63b669873db1ac96d3de4c68b849b88e535fe0e279.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
6c3c667bd6f212078f75ef63b669873db1ac96d3de4c68b849b88e535fe0e279.dll
Resource
win10v2004-20240508-en
General
-
Target
6c3c667bd6f212078f75ef63b669873db1ac96d3de4c68b849b88e535fe0e279
-
Size
41KB
-
MD5
9bcf273585b19ea9f0b76ad24465a0ee
-
SHA1
c86bbd99265d9ed38649de37bb44b3efc968152b
-
SHA256
6c3c667bd6f212078f75ef63b669873db1ac96d3de4c68b849b88e535fe0e279
-
SHA512
dfd09b0229e261b4f8cd5c862d243ad372f25a0374a0903068686f49f50669054d463b25fbd165e4497737bfe62f90607ed233c03e366d705b2c9e5792c9e251
-
SSDEEP
768:+fk8hGV1QI3xBFuEoziABHQbG395g8qXi8JJKSTePGgPQbl0l3WO27P5xx:k/HbjcXi8fKXQv7P53
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6c3c667bd6f212078f75ef63b669873db1ac96d3de4c68b849b88e535fe0e279
Files
-
6c3c667bd6f212078f75ef63b669873db1ac96d3de4c68b849b88e535fe0e279.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
mscoree
_CorDllMain
Sections
.text Size: 39KB - Virtual size: 39KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 988B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ