Static task
static1
Behavioral task
behavioral1
Sample
Jeez.Gateway.Interface.XmlSerializers.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
Jeez.Gateway.Interface.XmlSerializers.dll
Resource
win10v2004-20240426-en
General
-
Target
Jeez.Gateway.Interface.XmlSerializers.dll
-
Size
28KB
-
MD5
b6de0821f1c9068415b3d1190345cf2f
-
SHA1
624393cc2709998a03cb441b88abb1149f58e2cb
-
SHA256
bf7eebc09a62d873dc71628ff30d9d3ddab5277e2448bb026f5e4905e93063c3
-
SHA512
e160f6f1a0d56548df2d3724ab5b16058d45f6a608db071d99cda05d6ea92f6eaec496199b12061ea8056fc909ca607f25504a4cf8226cc192ad0aba7030115c
-
SSDEEP
192:Q6VNqdp0ZVsEp4/ErAaeZ/F3AmWvoGQO:tVNDnm/EMaA5GB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Jeez.Gateway.Interface.XmlSerializers.dll
Files
-
Jeez.Gateway.Interface.XmlSerializers.dll.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 26KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 792B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ