D:\Dev\workspace\v14\Visual C#\Common\Prd.common\obj\Release\Prd.common.pdb
Static task
static1
Behavioral task
behavioral1
Sample
69993b0d8a1ae6fc79d76a27ed9c1581d5d712c95d91e15372a8fa32a46ead22.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
69993b0d8a1ae6fc79d76a27ed9c1581d5d712c95d91e15372a8fa32a46ead22.dll
Resource
win10v2004-20240709-en
General
-
Target
69993b0d8a1ae6fc79d76a27ed9c1581d5d712c95d91e15372a8fa32a46ead22
-
Size
200KB
-
MD5
0ea0018c774e3bbed11312276ccb6507
-
SHA1
6f9f1ab9aa83f6378ef86480ca89b9176ff28f5d
-
SHA256
69993b0d8a1ae6fc79d76a27ed9c1581d5d712c95d91e15372a8fa32a46ead22
-
SHA512
14d2537d4e37111367c6b435639c6c221392312367ce29b33e08285be8d1156b37b98ed78ea656a22a877e0237f0d296b501717e08038d95a5d104f7765ab873
-
SSDEEP
3072:Qzi8kL7MIDz6NkT1ch8VIBGKOjIfJbzlWG1keFjrmWv9HpwHbSAa/mdb7WG0bCid:QO8kxD5TCcLIfJbzDkWrh9P8b7s
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 69993b0d8a1ae6fc79d76a27ed9c1581d5d712c95d91e15372a8fa32a46ead22
Files
-
69993b0d8a1ae6fc79d76a27ed9c1581d5d712c95d91e15372a8fa32a46ead22.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB Paths
Imports
mscoree
_CorDllMain
Sections
.text Size: 197KB - Virtual size: 197KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ