D:\work\projects\yun-hui-solution\WorkJianzhiProject_old\XmlDataAnalysis\obj\Debug\XmlDataAnalysis.pdb
Static task
static1
Behavioral task
behavioral1
Sample
XmlDataAnalysis.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
XmlDataAnalysis.dll
Resource
win10v2004-20240508-en
General
-
Target
XmlDataAnalysis.dll
-
Size
180KB
-
MD5
cddebf1b46aff47107170a44321997e4
-
SHA1
24fae1d337fcc95ed26edec98e7ed4765120c297
-
SHA256
18be54925715e1f4ce0241b363da9325bf6498d02a48a91b226bc4bbef70d1d2
-
SHA512
a17ee96dd3d6902a0241f22486a1182cad8580ce8c5ea5c1bab02463c1660e80b5e54370a7991c90ee33d45200fc2ec19fd14101d412b1bdd88a4b1ef15c8d47
-
SSDEEP
3072:/zq1GAAnqhZInsZqbr+/TnB8S/X8g3FCRb+3Mjpmb:/zvqwscr+bB8S/nFCRb+cw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource XmlDataAnalysis.dll
Files
-
XmlDataAnalysis.dll.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB Paths
Imports
mscoree
_CorDllMain
Sections
.text Size: 178KB - Virtual size: 177KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 948B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ