Static task
static1
Behavioral task
behavioral1
Sample
adtschema.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
adtschema.dll
Resource
win10v2004-20240426-en
General
-
Target
adtschema.dll
-
Size
674KB
-
MD5
c94a9b9f7de29c2b708591ae8cef5d2e
-
SHA1
6740f6f0cf849b6b59c6c30a5ac57262531fbdc9
-
SHA256
66079914e86b92caf4bc5f56c8bae30322d097ab81766dcca333bbb3f084aeb4
-
SHA512
9befd4ad959b906e122181e2869abb540a215a09d91ff419e967b3b0313e59b108d8e9e8ed89cf6eb7b110cbc000d573181c56ad3ce88e5d2ea53bee0372f48b
-
SSDEEP
1536:GtEu+uFGChunsdjQQzMjb9aQmB+zLvGLW+Po0dT7AX31cQp3u7fSxxnBAnBXwk2K:GtEu+uFGCXtpLGXl0eP+PxB+W
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource adtschema.dll
Files
-
adtschema.dll.dll windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.rsrc Size: 674KB - Virtual size: 673KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ