Z:\Unity Projects\ProximityVoice\Library\Bee\artifacts\1900b0aP.dag\Unity.VisualScripting.State.pdb
Static task
static1
Behavioral task
behavioral1
Sample
44d452b6fbcf80a7fc2494b8150550ce8fb34d3f807b957d3a6175a0a4128e52.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
44d452b6fbcf80a7fc2494b8150550ce8fb34d3f807b957d3a6175a0a4128e52.dll
Resource
win10v2004-20240611-en
General
-
Target
44d452b6fbcf80a7fc2494b8150550ce8fb34d3f807b957d3a6175a0a4128e52
-
Size
26KB
-
MD5
d9a21884f647cdb8393f30733fa31098
-
SHA1
76b771ae034e99b32cd89b5522a1516e72b4c423
-
SHA256
44d452b6fbcf80a7fc2494b8150550ce8fb34d3f807b957d3a6175a0a4128e52
-
SHA512
ae9d035340af04b8703a48c765afed13700bed21b996b1703a0c678498f2216b464514b43239277fe18133e3ef01bc0d8916057a66a591050503f44641fd0df5
-
SSDEEP
768:emAnUEazFxPw0q6XtklGn/Gmsf0jHvfwY9Xqwkpvy:5BZXtkqBkovcE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 44d452b6fbcf80a7fc2494b8150550ce8fb34d3f807b957d3a6175a0a4128e52
Files
-
44d452b6fbcf80a7fc2494b8150550ce8fb34d3f807b957d3a6175a0a4128e52.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB Paths
Imports
mscoree
_CorDllMain
Sections
.text Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 752B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ