Static task
static1
Behavioral task
behavioral1
Sample
adtschema.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
adtschema.dll
Resource
win10v2004-20240508-en
General
-
Target
adtschema.dll
-
Size
674KB
-
MD5
dfd5651b4f00fd4b78e66500a39a3bb3
-
SHA1
b906b9a1575b0291ae932af7d5cd7a364f0b73f0
-
SHA256
5f54f0472240c361d9b26714e312290eb653cd0f6ec31f9c0b1a10ce2b7152a7
-
SHA512
c030f4ae7ecf44c40cfcd2d39fee4368eef70dd3df735a2172fb470d3e5a551f3c50d5c4024a6b735606cac3d7074fd76f3e61360c537e6aba34c3dd811843b1
-
SSDEEP
1536:ZQEu+uFGChunsdjQQzMjb9aQmB+zLvGLW+Po0dT7AX31cQp3u7fSxxnBAnBXwk2K:ZQEu+uFGCXtpLGXl0eP+PxB+W
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource adtschema.dll
Files
-
adtschema.dll.dll windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.rsrc Size: 674KB - Virtual size: 673KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ