c:\Windows\Microsoft.NET\Framework\v2.0.50727\Temporary ASP.NET Files\root\97109801\6daf76a3\App_Web_zxdwvw1q.pdb
Static task
static1
Behavioral task
behavioral1
Sample
4acec575f41814613cfbc44b5aa23be07d3bc7bdc59ec778bb3f66d297358082.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
4acec575f41814613cfbc44b5aa23be07d3bc7bdc59ec778bb3f66d297358082.dll
Resource
win10v2004-20240426-en
General
-
Target
4acec575f41814613cfbc44b5aa23be07d3bc7bdc59ec778bb3f66d297358082
-
Size
180KB
-
MD5
b983d94fcf612026e56b53f24a5be64c
-
SHA1
f5800a17da2c3b915c8e8a002b08ea226a0ad1fe
-
SHA256
4acec575f41814613cfbc44b5aa23be07d3bc7bdc59ec778bb3f66d297358082
-
SHA512
7bacc7637e2d0ce27bb0a2cffdcdb779ca251f7e26a435f271b199275d32692410ac4be45753428149d95871ba328335ad1eebb114d7fd598b2887135b6b232a
-
SSDEEP
3072:ap70Ttqle29HfToXSJMT+dsyZQUeiXUyWmrjeZGhqFqBq:abegoxZG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4acec575f41814613cfbc44b5aa23be07d3bc7bdc59ec778bb3f66d297358082
Files
-
4acec575f41814613cfbc44b5aa23be07d3bc7bdc59ec778bb3f66d297358082.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
mscoree
_CorDllMain
Sections
.text Size: 156KB - Virtual size: 155KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ