System.Printing.pdb
Static task
static1
Behavioral task
behavioral1
Sample
60af199dd52810a802888a774f7b51e7e51c19742ea5d4bca9c9280702615eff.dll
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
60af199dd52810a802888a774f7b51e7e51c19742ea5d4bca9c9280702615eff.dll
Resource
win10v2004-20240426-en
General
-
Target
60af199dd52810a802888a774f7b51e7e51c19742ea5d4bca9c9280702615eff
-
Size
364KB
-
MD5
ba0a1a601fca53ea62586498040e8f6c
-
SHA1
9474cfbfac9256a7ef6741aa4ea86abd4f2fcb5b
-
SHA256
60af199dd52810a802888a774f7b51e7e51c19742ea5d4bca9c9280702615eff
-
SHA512
8c31644859eb68ceae19a68ff312af9a0fbfbefe02b18b0fa9d98f537628d2007200dc4c8bace21e616518c41479ce1844a9c09e356d93dcee4e874b95bdc140
-
SSDEEP
6144:MkvgB1maadPW2eaZ76t8bb6IyVQr1IASAci:H+KVW4loJhi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 60af199dd52810a802888a774f7b51e7e51c19742ea5d4bca9c9280702615eff
Files
-
60af199dd52810a802888a774f7b51e7e51c19742ea5d4bca9c9280702615eff.dll windows:5 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
mscoree
_CorDllMain
Sections
.text Size: 160KB - Virtual size: 156KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 192KB - Virtual size: 188KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ