C:\Users\JorgeM\Documents\Dev_Kriterion\PositivaExequias\LogsAplicacion\obj\Release\net6.0\LogsAplicacion.pdb
Static task
static1
Behavioral task
behavioral1
Sample
LogsAplicacion.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
LogsAplicacion.dll
Resource
win10v2004-20240426-en
General
-
Target
LogsAplicacion.dll
-
Size
5KB
-
MD5
0ba888f3ba9e5638502969937625e082
-
SHA1
defa6208aac5359bf2e06aebb863beaf43c49d34
-
SHA256
e8fe632adb76a4dd027df98dfa11e90a526a95eb828a1845b67e567445db0914
-
SHA512
d2d8b7eaa5f62c49f8eabf441e85cf0ee5bd9ff95d575d3159c6c5edd62d07aed860d4370a87bcb4bde32409bfaa6ae826d5fd5038b55cdbe72025fca7d1293c
-
SSDEEP
96:eFlw2nI1hz4gVUK2h7+Vh0cnSRruwunARF2l6geO2ca:e3HI/zVUK66nCiFnAXGH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource LogsAplicacion.dll
Files
-
LogsAplicacion.dll.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB Paths
Imports
mscoree
_CorDllMain
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 856B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ