Static task
static1
Behavioral task
behavioral1
Sample
ICSharpCode.SharpZipLib.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
ICSharpCode.SharpZipLib.dll
Resource
win10v2004-20240426-en
General
-
Target
ICSharpCode.SharpZipLib.dll
-
Size
124KB
-
MD5
253038bbd4152d720cee554537a8b034
-
SHA1
bf6f6bae79173b5aa409de96ad9c0077e9660247
-
SHA256
18870a888dc2d5ddf5c072945a8fac920b8cffa7c49f9c75cd9412bc1ed1f56c
-
SHA512
6bd03ba05d54ce8cb57011d87c52688a7b026a125da1267cc2de1da3619d75bd477124b693f42efef5e60221954e7a02ceac259cfe4079f3aafe2b41924f4130
-
SSDEEP
1536:ekYFXmye8S6zhb1AmaUD8Zw/ByBkjSjE78mODNq4fWVWpGL1iPcG11:ekE2ye9y1AUg9kSmMqxuGLEPcGH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ICSharpCode.SharpZipLib.dll
Files
-
ICSharpCode.SharpZipLib.dll.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 112KB - Virtual size: 110KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ