E:\Docs\Visual Studio 2010\Projects\framework\djelib_2.0\trunk\DjeLibrary_2\bin\Debug\DjeLibrary_2_full.pdb
Static task
static1
Behavioral task
behavioral1
Sample
DjeLibrary_2_full.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral2
Sample
MiniBnkManager.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
ModdingLibrary_2.dll
Resource
win10v2004-20240802-en
General
-
Target
TDUMT2_public.zip
-
Size
141KB
-
MD5
50624c0b04e8556b8856651e69009a19
-
SHA1
efa6afb83b6216921c5aebd93ff5e5f992890a6a
-
SHA256
95999f45d1689e0dbe3c2b3b8f0a9707dda47b72c37adfc10ecff078c48b75f7
-
SHA512
bf1b6891275444f363949fb5052a36782ea03733611d2af7ddb117ea71048a03a2a4d3b93015ab0a2f744803556692ea08b2c24a17c9580b69cba75b8d516a61
-
SSDEEP
3072:/4jTuv7ysqZfOnkNzLdM1AZeUtwR+MvGuefmSt4geGm:QDLdu0eUtwh694g/m
Malware Config
Signatures
-
Unsigned PE 3 IoCs
Checks for missing Authenticode signature.
resource unpack001/DjeLibrary_2_full.dll unpack001/MiniBnkManager.exe unpack001/ModdingLibrary_2.dll
Files
-
TDUMT2_public.zip.zip
-
Conf/log4net.xml
-
DjeLibrary_2_full.dll.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_DLL
PDB Paths
Imports
mscoree
_CorDllMain
Sections
.text Size: 301KB - Virtual size: 301KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 920B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
MiniBnkManager.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
E:\Docs\Visual Studio 2010\Projects\tdumt\tdumt-app_2.0\branches\APP_BRC_2.0.B3-1\TDUMT_2_MiniBnk\obj\x86\Release\MiniBnkManager.pdb
Imports
mscoree
_CorExeMain
Sections
.text Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
ModdingLibrary_2.dll.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
E:\Docs\Visual Studio 2010\Projects\tdumt\tdumodlib_2.0\branches\LIB_BRC_2.0.B3-1\ModdingLib\obj\x86\Release\ModdingLibrary_2.pdb
Imports
mscoree
_CorDllMain
Sections
.text Size: 25KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 976B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
README FIRST - TDUMT2 MBM.txt