d:\MyTemporaryAspNetFiles\root\045f5747\c2246f45\App_Web_u40nmusi.pdb
Static task
static1
Behavioral task
behavioral1
Sample
f81e56ba0ad12a389d77ca33a39375a2197c2b5ea2d1007012c8fc3d1bd9ed04.dll
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
f81e56ba0ad12a389d77ca33a39375a2197c2b5ea2d1007012c8fc3d1bd9ed04.dll
Resource
win10v2004-20240611-en
General
-
Target
f81e56ba0ad12a389d77ca33a39375a2197c2b5ea2d1007012c8fc3d1bd9ed04
-
Size
475KB
-
MD5
a2f2a816ad03b36337149246db538b82
-
SHA1
c82ccea23d057d4f641254c1b94c6bebc91cb0d6
-
SHA256
f81e56ba0ad12a389d77ca33a39375a2197c2b5ea2d1007012c8fc3d1bd9ed04
-
SHA512
e6ec000f52fb3cabe5258323a2c990f4121ef4d03da0e73839a566ef9a4640b5946b1c05979e8babc8cf3d26e956b03c9d40cb8aa7f6702886116e7b351d4fec
-
SSDEEP
6144:KkAfwKQVE6IHt672HUxuqEPF82XSjctTwpKu0LAL0gjTfJ+e6Govp/aQ:KkAfwNmqgp/3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f81e56ba0ad12a389d77ca33a39375a2197c2b5ea2d1007012c8fc3d1bd9ed04
Files
-
f81e56ba0ad12a389d77ca33a39375a2197c2b5ea2d1007012c8fc3d1bd9ed04.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
mscoree
_CorDllMain
Sections
.text Size: 473KB - Virtual size: 473KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 712B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ