D:\美迪软件\美迪安卓服务器端\CassiniDev\CassiniDev\obj\x86\Release\CassiniDev4-lib.pdb
Static task
static1
Behavioral task
behavioral1
Sample
CassiniDev4-lib.dll
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
CassiniDev4-lib.dll
Resource
win10v2004-20240508-en
General
-
Target
CassiniDev4-lib.dll
-
Size
128KB
-
MD5
e43c4fca8b6460bbb7770fd153afff79
-
SHA1
3f98a1b9e8a7a8de77635e65a9f350231be01e41
-
SHA256
b2b926e5bbb50739b815b52f6e3c703f8aa3d1f8d2934f4c1ba6881d15b6a01e
-
SHA512
4a8cf41753f719ad26f61d8c24308990c70d7cf1ece239772b9959e836ac898a28042d87583b15628de0b98dfe5e2adcd0893b2c7c9eb21949beb7e38c986609
-
SSDEEP
3072:PZJXCxEo1qc5U0GHp1sY5r2UMB10YWY/K9NWhJSUG54s4/YeR54sr/o4+:PIDToj96jY1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource CassiniDev4-lib.dll
Files
-
CassiniDev4-lib.dll.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
mscoree
_CorDllMain
Sections
.text Size: 122KB - Virtual size: 122KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ