D:\Project C#.NET\DShowNET\obj\Release\DShowNET.pdb
Static task
static1
Behavioral task
behavioral1
Sample
DShowNET.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
DShowNET.dll
Resource
win10v2004-20240426-en
General
-
Target
DShowNET.dll
-
Size
60KB
-
MD5
3e9e91b03b7f1b4fac84fb2184aba750
-
SHA1
b4d0d46a023fdcaf9051658fab8447b56468e8df
-
SHA256
2a96fb208c1de1906f7a5f45ccea1d7a3dfa0f623f9896c02d8e88653ec07a4f
-
SHA512
7797024256fcf950f4008aec43f84ee68f104a0d95dd2b629b8fce768b876bd64bcc5bbd0e27c1c3d6b88c1ad623c851520dcaecd82d2ee3b9421247fecde50d
-
SSDEEP
768:43eVg3a6PdhdWInSWkGgFAf2ZTHsGGxpeNBmrrNfFfIVh/TX4Rr:43sg3dBWInSWZgFpyGSpeQ4hjOr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource DShowNET.dll
Files
-
DShowNET.dll.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
mscoree
_CorDllMain
Sections
.text Size: 48KB - Virtual size: 46KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ