D:\kakao\work\Source\LEGO_AAW\LEGO.App.Launcher.Square.CheckZinnyMaintenance\obj\x86\Release\LEGO.App.Launcher.Square.CheckZinnyMaintenance.pdb
Static task
static1
Behavioral task
behavioral1
Sample
b7e12215bafd18c88b850622855df62133f3dc20e8e6b3ba0f0dd60bac70b25d.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b7e12215bafd18c88b850622855df62133f3dc20e8e6b3ba0f0dd60bac70b25d.dll
Resource
win10v2004-20240802-en
General
-
Target
b7e12215bafd18c88b850622855df62133f3dc20e8e6b3ba0f0dd60bac70b25d
-
Size
519KB
-
MD5
b3d06e897cd0af6de4863ab89e9f85a8
-
SHA1
81d2b0366902e2851d5a57edb7fe9fbca953561e
-
SHA256
b7e12215bafd18c88b850622855df62133f3dc20e8e6b3ba0f0dd60bac70b25d
-
SHA512
8681bc744cbce5d1e51864df84daa0a160a2a1b7b184191099217b16f4068d7685172be380260eaa8808e8ab2224ee09ee7b9b7254c1136e249b3a2de7d83bc7
-
SSDEEP
12288:Poc7gftmzp5NKfx1suqw1qu4+Ut1/N5p3h9APPpGvZNFUKpiA1gk2aYKtQXiCoQY:PocMeXK5bqKqKc1/N5p3h+PPpGvZNFUU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b7e12215bafd18c88b850622855df62133f3dc20e8e6b3ba0f0dd60bac70b25d
Files
-
b7e12215bafd18c88b850622855df62133f3dc20e8e6b3ba0f0dd60bac70b25d.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
mscoree
_CorDllMain
Sections
.text Size: - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.$&' Size: - Virtual size: 217KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.A(? Size: 512B - Virtual size: 8B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.%o& Size: 515KB - Virtual size: 515KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ