c:\Windows\Microsoft.NET\Framework\v2.0.50727\Temporary ASP.NET Files\root\0baa0b41\ca3de00f\App_Web_ci9eghbo.pdb
Static task
static1
Behavioral task
behavioral1
Sample
e970491e7231ccfab951e8b2f0018860N.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
e970491e7231ccfab951e8b2f0018860N.dll
Resource
win10v2004-20240709-en
General
-
Target
e970491e7231ccfab951e8b2f0018860N.exe
-
Size
116KB
-
MD5
e970491e7231ccfab951e8b2f0018860
-
SHA1
8c7f768fd22c3c6ad84f725ff80bd330a7d403a4
-
SHA256
bade43e7c9571883fe9af3a1e47905c0f1b11a0654ad902c477485d36786da23
-
SHA512
c539199300a82aecea2d0c6294e347d9b477904bda4b0ccb9adadb43054ce81ac4a074a76ca897f06c0693bd818cbcac0e847b7ff0b5c8fb9a421081ca360771
-
SSDEEP
3072:IYQixuVlZoqF+M7Kfs2PPf7XSJMT+dsyGQUeiXUyWmrjV07+:IY/U7ys8907
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e970491e7231ccfab951e8b2f0018860N.exe
Files
-
e970491e7231ccfab951e8b2f0018860N.exe.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
mscoree
_CorDllMain
Sections
.text Size: 104KB - Virtual size: 101KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ