Static task
static1
Behavioral task
behavioral1
Sample
adtschema.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
adtschema.dll
Resource
win10v2004-20240426-en
General
-
Target
adtschema.dll
-
Size
674KB
-
MD5
432ffe3f8f7848ce7c3b324322445f24
-
SHA1
a88a94e76a336b56f2917469a59aacfd42500ac6
-
SHA256
62b25d212e1a89400f13024e4308b2f5251b41d02ad06860e91fbc215ca5cf76
-
SHA512
50042ef5a1c9b793d5fd26abe6929293a694000dfa8824ed4166c9ec7542826ef0d9908e9b2853f8d2a27e69a3c6ea7a1df4e78eef106480d275408e81dcfab2
-
SSDEEP
1536:dJEu+uFGChunsdjQQzMjb9aQmB+zLvGLW+Po0dT7AX31cQp3u7fSxxnBAnBXwk2K:dJEu+uFGCXtpLGXl0eP+PxB+W
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource adtschema.dll
Files
-
adtschema.dll.dll windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.rsrc Size: 674KB - Virtual size: 673KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ