c:\Windows\Microsoft.NET\Framework\v2.0.50727\Temporary ASP.NET Files\root\06da6aeb\95140f79\App_Web_ny34h8nd.pdb
Static task
static1
Behavioral task
behavioral1
Sample
e48f36e55d060629d4cf419060a1f2727018fcb4c30ee1a78304015ed958e34b.dll
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
e48f36e55d060629d4cf419060a1f2727018fcb4c30ee1a78304015ed958e34b.dll
Resource
win10v2004-20240508-en
General
-
Target
e48f36e55d060629d4cf419060a1f2727018fcb4c30ee1a78304015ed958e34b
-
Size
212KB
-
MD5
433a518555106f9527c1ec363c61a8be
-
SHA1
068ceb817404a85d860845c7be4397b69c142f6c
-
SHA256
e48f36e55d060629d4cf419060a1f2727018fcb4c30ee1a78304015ed958e34b
-
SHA512
18b10b651f5d5224e27b331e1382ee61d767db40d51f1d7ca7c65daa1458be15a59b40bcb23cd4f05ab2a41e02c528d1e534d792c106bb8d52f7e475ca6225d0
-
SSDEEP
3072:36imevRpcoXtn7yQlQAaKnnUPJ5XSJMT+qsyGQUeiXUyWmrjJkNtmAZsF1i9LC8T:36iz7yiQxUogF1QF6g
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e48f36e55d060629d4cf419060a1f2727018fcb4c30ee1a78304015ed958e34b
Files
-
e48f36e55d060629d4cf419060a1f2727018fcb4c30ee1a78304015ed958e34b.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
mscoree
_CorDllMain
Sections
.text Size: 116KB - Virtual size: 114KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 88KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ