C:\WCFExtras\WCFExtras\obj\Release\WCFExtras.pdb
Static task
static1
Behavioral task
behavioral1
Sample
WCFExtras.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
WCFExtras.dll
Resource
win10v2004-20240426-en
General
-
Target
WCFExtras.dll
-
Size
48KB
-
MD5
f956e0089336eb5e63d795302327dbc6
-
SHA1
bff6c7d23dba7b83f6bd6f4b9d4484473eeaf7b0
-
SHA256
c36ed0fadaf0bb18805a5e8a9bb5f54f8f88730e1816db127737fef94e6b769b
-
SHA512
70dcc3c0fd8e919a6423aa4cd93bcb068241059fb91bed8c6576e562082e9358753497175ae97696bdbde98b234149e966d023f166d320a7fd32b66053c7edf6
-
SSDEEP
768:q6vrtD9KqtDuqELANlxcjL6Dzo4+c2jKIA1WlMStlGfz8W5FV/:q6vrtD9PtDlxILjKIAB8W5FV/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource WCFExtras.dll
Files
-
WCFExtras.dll.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
mscoree
_CorDllMain
Sections
.text Size: 46KB - Virtual size: 46KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 848B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ