Static task
static1
Behavioral task
behavioral1
Sample
Assembly-CSharp.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
Assembly-CSharp.exe
Resource
win10v2004-20240802-en
General
-
Target
Assembly-CSharp.dll
-
Size
25.1MB
-
MD5
620f79648315ccf74b7586e19574a88c
-
SHA1
e9191685cb7147286f6dc3283e473b2f6be4bed9
-
SHA256
aee77d13c74546d5aeccccc45eb48287a696b308947ddb25d6d27366ef16395b
-
SHA512
017dc28334754daad2d01468416bbabdf339a9b213c4211a10f1b36fcf4cc5b8eded6d94cae83216df15d02035b43004daa8084fe363b1e5629f733e3d5ea20c
-
SSDEEP
196608:8BYcewBh5M5aUg09+dvTXgAKWAgIOqSdta94V1Ix:8e85M5tR+5SMldt5V
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Assembly-CSharp.dll
Files
-
Assembly-CSharp.dll.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 25.1MB - Virtual size: 25.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ