C:\projects\litedb\LiteDB\obj\Release\netstandard2.0\LiteDB.pdb
Static task
static1
Behavioral task
behavioral1
Sample
LiteDB.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
LiteDB.dll
Resource
win10v2004-20240508-en
General
-
Target
LiteDB.dll
-
Size
462KB
-
MD5
9246b45fefc96347dfbb502b25aa6ba1
-
SHA1
4542a115897d60cb58cced0b1d95b24a1897e304
-
SHA256
50da7a71860addd3f894d396d449e6063180311860db9b0475db51f6e47d5162
-
SHA512
911b33364e80515c7debfb95c32fcb43ef23b3446d893ba656dfaa9d60fe012175475bf18a29405c01d518d7ae7b99ffd6a08dbcb5b16b6bd31386aefb64f0c0
-
SSDEEP
6144:nSSYMUK7VtIqtxcxerkqeoCWIjEmRWitEmB0w6p6ONmNGsAtTR8/N3/mFzn1:BYDMlAVtElfNocsE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource LiteDB.dll
Files
-
LiteDB.dll.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB Paths
Imports
mscoree
_CorDllMain
Sections
.text Size: 460KB - Virtual size: 460KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 976B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ