D:\work\code\shengeng\v4\client\pc-client\Common\obj\Release\Common.pdb
Static task
static1
Behavioral task
behavioral1
Sample
Common.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
Common.dll
Resource
win10v2004-20240426-en
General
-
Target
Common.dll
-
Size
26KB
-
MD5
4ffe1840a771ed2888de31fa42c9c34b
-
SHA1
e5a4cd1d19d17eddbf42d2299da2d2c215a4164b
-
SHA256
1f2b90faf984397006caec91a0306b32932efc3a235f339ae482c2bc734b0068
-
SHA512
d006d7092daad8272293cff3da51fbfced058bc74bc0aeb9cfb87f0e07134ce95ee2a969010c3b51c2d73c09461fe3acc23f0e48b898cc6075bf1f9c4e0dd485
-
SSDEEP
384:HKW9lToHqJwQgdv80Qg00FpY39sUpuJXfODSaIqPzgpeMNL9fd8tPuTUMjNaRWWP:fzuHdvdQZHEJPODgtJF+tWTlj8l
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Common.dll
Files
-
Common.dll.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB Paths
Imports
mscoree
_CorDllMain
Sections
.text Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 908B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ