C:\Users\utpow\Videos\MimGT\Cosmetx-main\Cosmetx-main\Cosmetx\obj\Debug\netstandard2.1\Cosmetx.pdb
Static task
static1
Behavioral task
behavioral1
Sample
Cosmetx_3.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
Cosmetx_3.dll
Resource
win10v2004-20240426-en
General
-
Target
Cosmetx_3.dll
-
Size
8KB
-
MD5
ee9b17cd8868bf731c0e49877cdf6892
-
SHA1
f07a0995d4f06159f38b6506c70e35736a80524e
-
SHA256
69afff52830cb9bd245c5f1b27d1caf13fc2a52cd3ea71dc1f9a8323d4c9e410
-
SHA512
e96ce38719f6c0362fdf0bf1d71ecfaaf16fcb6a8f8099b81b0a8d430fe8deba1c3c4f399ab239f0161e6d66a169c89f595f84283c4b59ffea0568b3c4d10a0c
-
SSDEEP
96:lqQlwBTHm9GRDJXcKIIgCf2uqQniEvpVW8MHJBLjPPxU:lqQaBTmQRDNcKfjfqgNhPMJ9l
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Cosmetx_3.dll
Files
-
Cosmetx_3.dll.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB Paths
Imports
mscoree
_CorDllMain
Sections
.text Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 776B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ