C:\Development2018\Liquid\Tools\3rd Party Tools\Saxon\SaxonApi\obj\Release\Saxon.Api.pdb
Static task
static1
Behavioral task
behavioral1
Sample
9504bc405730a3ee07f6c80547fa05b8fecc4d5e0194b1b57a893e53a864e071.dll
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
9504bc405730a3ee07f6c80547fa05b8fecc4d5e0194b1b57a893e53a864e071.dll
Resource
win10v2004-20240426-en
General
-
Target
9504bc405730a3ee07f6c80547fa05b8fecc4d5e0194b1b57a893e53a864e071
-
Size
89KB
-
MD5
d1207dbbf32612258b792f21b9debab1
-
SHA1
d3035e5f08f3272ebee3b31027d7e269c89c8959
-
SHA256
9504bc405730a3ee07f6c80547fa05b8fecc4d5e0194b1b57a893e53a864e071
-
SHA512
d301948b2cf6d0afa5979bf26a381af3b32ffe5a3ed0b2e5e1e37840249569eb6220921819253ba13a9d23eeb1ecd307b8a49a7d0251bcb46c0e3a9488dafd47
-
SSDEEP
1536:294tesY16AQZe5Wt6JMHYWTwTMEJIXw8uLCJ5vlId5oLzk0ukV72ksRPqjaelpvm:294teb8Vl4WYMEqAuo5oLzk0uc2kUPuy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9504bc405730a3ee07f6c80547fa05b8fecc4d5e0194b1b57a893e53a864e071
Files
-
9504bc405730a3ee07f6c80547fa05b8fecc4d5e0194b1b57a893e53a864e071.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB Paths
Imports
mscoree
_CorDllMain
Sections
.text Size: 87KB - Virtual size: 87KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 912B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ