Static task
static1
Behavioral task
behavioral1
Sample
adtschema.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
adtschema.dll
Resource
win10v2004-20240508-en
General
-
Target
adtschema.dll
-
Size
713KB
-
MD5
6bcc9905a90c233fb021242e0abcb5a9
-
SHA1
9f59fd8f97f5b7522c8a249525bdc345c2f62756
-
SHA256
1acc66dfe3d649d28b0193ebbfd9ce71a4c4f3a2bab75d4f28ac1614d881d7ec
-
SHA512
b7f3b3800713dd1a377c5ae4d10815782f1941d357649445601b8fdc331cd377822b352fc835f60fe407d39576374fa21a68121ca5665ed5f3bfef182dccbcbf
-
SSDEEP
1536:hHu+uwWQ+unsd4Cx3XQQzMjbCaQ61+PLncuQk+VGCl41JPe6SmUPCcVDC1pgPHw8:hHu+uwWQA4xhuQw90eYI20vc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource adtschema.dll
Files
-
adtschema.dll.dll windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.rsrc Size: 713KB - Virtual size: 712KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ