D:\Dev\workspace\v14\Visual C#\Common\Prd.common\obj\Release\Prd.common.pdb
Static task
static1
Behavioral task
behavioral1
Sample
7c6004689d144f19213f44c68aa2f68dc497f93dbcf17bfaf115921efe8452b0.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
7c6004689d144f19213f44c68aa2f68dc497f93dbcf17bfaf115921efe8452b0.dll
Resource
win10v2004-20240709-en
General
-
Target
7c6004689d144f19213f44c68aa2f68dc497f93dbcf17bfaf115921efe8452b0
-
Size
200KB
-
MD5
16fd617624b1c100140db049109556a6
-
SHA1
b7a4d13e9b3f3767514173f36654eec2279a2db0
-
SHA256
7c6004689d144f19213f44c68aa2f68dc497f93dbcf17bfaf115921efe8452b0
-
SHA512
48f5a9ee69400e600d77a40df347a54d42228e182c0780bbfc9cc2e21afcfbd2d97cf9f320106cef3bd0bf2689ba31dca7642b974ddc6f49c59b1a60d7447eef
-
SSDEEP
3072:kzi8kL7MIDz6NkT1ch8VIBGKOjIfJbzlWG1keFjrmWv9HpwHbSAa/mdb7WG0bCid:kO8kxD5TCcLIfJbzDkWrh9P8b7s
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7c6004689d144f19213f44c68aa2f68dc497f93dbcf17bfaf115921efe8452b0
Files
-
7c6004689d144f19213f44c68aa2f68dc497f93dbcf17bfaf115921efe8452b0.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB Paths
Imports
mscoree
_CorDllMain
Sections
.text Size: 197KB - Virtual size: 197KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ