D:\Source\htmlagilitypack.new\Trunk\HtmlAgilityPack\obj\Release\HtmlAgilityPack.pdb
Static task
static1
Behavioral task
behavioral1
Sample
HtmlAgilityPack.dll
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
HtmlAgilityPack.dll
Resource
win10v2004-20240508-en
General
-
Target
HtmlAgilityPack.dll
-
Size
131KB
-
MD5
d631f1924d735e079e61e6b46f0bacad
-
SHA1
0228bacf9d428f42f586ef60b3bea3c4af2275c2
-
SHA256
ecedc08c8000d839858af81d34d5b11b3cd68faa78aaf9446f4e8987c5247742
-
SHA512
5b009943f429fd1702ec27141cbd1d26875df2d6373d12e4086e700f0ec267709248a637c66edfc01114d61a478c00fdd7af657ecfd2e1fc3b187edc9b40288e
-
SSDEEP
3072:qt+WnshNlKiHdl0+lKC9aWqTiwXwpchBYL/Xy18PIZzhvf:cHnstnHeC9aW4iHMYDyZH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource HtmlAgilityPack.dll
Files
-
HtmlAgilityPack.dll.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
mscoree
_CorDllMain
Sections
.text Size: 129KB - Virtual size: 128KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ