f:\dd\vsproject\xmake\XMakeCommandLine\objr\i386\MSBuild.pdb
Static task
static1
Behavioral task
behavioral1
Sample
c1be8988ec9074ce27abc1edfaa8d2cfaec82ffb237033de11d621be0cd4c4c6.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
c1be8988ec9074ce27abc1edfaa8d2cfaec82ffb237033de11d621be0cd4c4c6.dll
Resource
win10v2004-20240704-en
General
-
Target
c1be8988ec9074ce27abc1edfaa8d2cfaec82ffb237033de11d621be0cd4c4c6
-
Size
2.9MB
-
MD5
819a863ed7b5361fcb88254e38fa2965
-
SHA1
1d387514969b048d1dfa38038d297d4347f05247
-
SHA256
c1be8988ec9074ce27abc1edfaa8d2cfaec82ffb237033de11d621be0cd4c4c6
-
SHA512
76fc7c69355e559adf480a71158332a4473ce0e5a29a79e9d0c31f28c090b1afae1b22c75b08c27dc6486191f16392f830b59490e6e001b7b7446cfdadccaef0
-
SSDEEP
49152:Y4pNiTtk4pNiTtk4pNe4XDzxwqnstLet3Lyo:YMNqkMNqkMNnDFwqnstLE7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c1be8988ec9074ce27abc1edfaa8d2cfaec82ffb237033de11d621be0cd4c4c6
Files
-
c1be8988ec9074ce27abc1edfaa8d2cfaec82ffb237033de11d621be0cd4c4c6.dll windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Sections
.text Size: 36KB - Virtual size: 34KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.extrel Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 24KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.xdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.dbgmap Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.il Size: 60KB - Virtual size: 57KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ