u:\Build\U38Pkg\RELEASE_VS2013\IA32\HpServerPkg\Universal\PciDeviceTable\PciDeviceTablePei\PciDeviceTable\DEBUG\PciDeviceTablePeim.pdb
Static task
static1
Behavioral task
behavioral1
Sample
71b37c11dc37220e7e374685d14d83d06ad76e5584cf0b642cabb529ed6ce1ba.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
71b37c11dc37220e7e374685d14d83d06ad76e5584cf0b642cabb529ed6ce1ba.dll
Resource
win10v2004-20240508-en
General
-
Target
71b37c11dc37220e7e374685d14d83d06ad76e5584cf0b642cabb529ed6ce1ba
-
Size
16KB
-
MD5
ca6588e42312cf25cf9db5906c712fce
-
SHA1
e5b2a474a95a0a903468cbfe6c3d7c6f5823aa0d
-
SHA256
71b37c11dc37220e7e374685d14d83d06ad76e5584cf0b642cabb529ed6ce1ba
-
SHA512
bfc9fb978fc7150de86ad5dd93a9064948ef5c5b2000d4769b106225c05005ad1d1bdf94904b737840ce1de35e45f63b2ce6820e67cd7165d325a77bea643d01
-
SSDEEP
192:2OgVJM9etlMowNhm45VkbR1eCcsuoLBmYc7QJOCkxB41Amdf5DliPmrHWhT8+8RM:39e/MoUWuLdQJDCB4h5HWhTVqtkcW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 71b37c11dc37220e7e374685d14d83d06ad76e5584cf0b642cabb529ed6ce1ba
Files
-
71b37c11dc37220e7e374685d14d83d06ad76e5584cf0b642cabb529ed6ce1ba.dll windows:0 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 320B - Virtual size: 300B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ