Static task
static1
Behavioral task
behavioral1
Sample
O2S.Components.PDFView4NET.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
O2S.Components.PDFView4NET.dll
Resource
win10v2004-20240508-en
General
-
Target
O2S.Components.PDFView4NET.dll
-
Size
2.0MB
-
MD5
221104313fbacb61ae78e78f628e917a
-
SHA1
39ba41644871178bceacf100494a613e463af4eb
-
SHA256
ab74e0c5db6e8f88965beda2c4bcc7c9c424497b609098f5ef11b73f48024d72
-
SHA512
db480037b85924f372ab2780cd1ee8c26ebdf93dcb71393d915b50143064fc03e59b877b3335f0dad033cf92f29b3b4c8736c638fdbf8ec934ea7dcf7a677471
-
SSDEEP
24576:5HxUHDOcTt2Im9cPTq/RYXr6iPIVaUp2pV+GIbdROy5s63ZwuxbGpyds:wAiPIVaRes6pvxq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource O2S.Components.PDFView4NET.dll
Files
-
O2S.Components.PDFView4NET.dll.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 2.0MB - Virtual size: 2.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ