Static task
static1
Behavioral task
behavioral1
Sample
Microsoft.VisualStudio.TextManager.Interop.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
Microsoft.VisualStudio.TextManager.Interop.dll
Resource
win10v2004-20240508-en
General
-
Target
Microsoft.VisualStudio.TextManager.Interop.dll
-
Size
112KB
-
MD5
b6ed0f4fb32d0fc2ad7072b2af39e6e2
-
SHA1
e873ce91823ef931f20c7d1fc9eca59b69cf07b4
-
SHA256
b9ec0543f9b3f7a6b49020763984753c72dbe67d678c826389578a5097a6d765
-
SHA512
b25259a3f0c95289ff88b8fd89b9cfdd730eb4e399e48b71ea73ff2c492328e0b2d0a10a02c5d6fcdf2c15b4425de5539a70013283bc3490ad1cd3b13ea05ac3
-
SSDEEP
3072:o71yxMGwXWWY7HfCB21HcA+yxUv/gKw8l7355Ee:yAlMJiUHw8tf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Microsoft.VisualStudio.TextManager.Interop.dll
Files
-
Microsoft.VisualStudio.TextManager.Interop.dll.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 100KB - Virtual size: 97KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 848B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ