c:\Windows\Microsoft.NET\Framework\v2.0.50727\Temporary ASP.NET Files\root\5b4d0df4\507a8d22\App_Web_rerahi8r.pdb
Static task
static1
Behavioral task
behavioral1
Sample
9d3b366918b8d9f77e48b6aa1a201a0fbc9ce20312e6e3def6ce4b3ef270926e.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
9d3b366918b8d9f77e48b6aa1a201a0fbc9ce20312e6e3def6ce4b3ef270926e.dll
Resource
win10v2004-20240611-en
General
-
Target
9d3b366918b8d9f77e48b6aa1a201a0fbc9ce20312e6e3def6ce4b3ef270926e
-
Size
148KB
-
MD5
a1d3d46bac9a2a22d67e01849946b361
-
SHA1
360d95fe82c6d6e8d4e34425c885a34b31996ef4
-
SHA256
9d3b366918b8d9f77e48b6aa1a201a0fbc9ce20312e6e3def6ce4b3ef270926e
-
SHA512
d3c2d0958c5c7b70f8607720250784c0a0e6e302de4b2075b14dc47a0e895761fdf6ae882c0a11260f94e664331aebcc7db70de2d2838f9c9354dfb69a44fde4
-
SSDEEP
3072:TGr4URljRjHaCtuPmnl+7090hn6XSJMT+mzMSU4Fm1MyWmriqYtq:216CKm7eY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9d3b366918b8d9f77e48b6aa1a201a0fbc9ce20312e6e3def6ce4b3ef270926e
Files
-
9d3b366918b8d9f77e48b6aa1a201a0fbc9ce20312e6e3def6ce4b3ef270926e.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
mscoree
_CorDllMain
Sections
.text Size: 124KB - Virtual size: 121KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 16KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ