c:\Windows\Microsoft.NET\Framework\v2.0.50727\Temporary ASP.NET Files\root\06da6aeb\95140f79\App_Web_l2j7wtit.pdb
Static task
static1
Behavioral task
behavioral1
Sample
cecd25e237b051387657a50197f3cdbf59e836329c215896b45c99de900d5a37.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
cecd25e237b051387657a50197f3cdbf59e836329c215896b45c99de900d5a37.dll
Resource
win10v2004-20240508-en
General
-
Target
cecd25e237b051387657a50197f3cdbf59e836329c215896b45c99de900d5a37
-
Size
212KB
-
MD5
b74ed5febed8186faab88e0b8508d2f7
-
SHA1
dc25ad19b09755969becb2df3e52ab167e75b36a
-
SHA256
cecd25e237b051387657a50197f3cdbf59e836329c215896b45c99de900d5a37
-
SHA512
9c7cb73f19edf159bc4c504c8fc9f2c4b4678c86c8a6760ad6ae80a5e04dbdf3e358b031b035cca34e180ef1ed844138edfd11420d5877ef7f819b9fce5f7333
-
SSDEEP
3072:t+VRSF4KJIz1zRxu41ffbXSJMT+qsyGQUeiXUyWmrjYpwgEtmAZsF1i9LC8Y:t+VRSF4lzRxxbwgdF1Q
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cecd25e237b051387657a50197f3cdbf59e836329c215896b45c99de900d5a37
Files
-
cecd25e237b051387657a50197f3cdbf59e836329c215896b45c99de900d5a37.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
mscoree
_CorDllMain
Sections
.text Size: 116KB - Virtual size: 114KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 88KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ