c:\Windows\Microsoft.NET\Framework\v2.0.50727\Temporary ASP.NET Files\root\5b4d0df4\507a8d22\App_Web_aqkgleck.pdb
Static task
static1
Behavioral task
behavioral1
Sample
f84042a9b034fb53152ecc88f2532600N.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f84042a9b034fb53152ecc88f2532600N.dll
Resource
win10v2004-20240802-en
General
-
Target
f84042a9b034fb53152ecc88f2532600N.exe
-
Size
148KB
-
MD5
f84042a9b034fb53152ecc88f2532600
-
SHA1
235a55b04162f9488f83ef0be4ec3b597ba969c6
-
SHA256
4acd127594a0736b24d3cb5014bf53addc998ac8363844dbd690e79d7214fefc
-
SHA512
7414d9cdc3ceda9687378289eafc12438b7742e428affaa5148923fe67b6f50911bf1f48dc11a30e39dd596e3d2251a853440b756162cb68e37df94a923e7607
-
SSDEEP
3072:i/6X9kIl5iA/gujiCZyVoOk0tnnXSJMT+jzMTU4Fm1MyWmri/jqPY:3GY4Uc0Y
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f84042a9b034fb53152ecc88f2532600N.exe
Files
-
f84042a9b034fb53152ecc88f2532600N.exe.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
mscoree
_CorDllMain
Sections
.text Size: 124KB - Virtual size: 121KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 16KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ