c:\Windows\Microsoft.NET\Framework\v4.0.30319\Temporary ASP.NET Files\root\ce1bf31a\1f800e3b\App_Web_jgah3gnm.pdb
Static task
static1
Behavioral task
behavioral1
Sample
c38cdec01dcc26610b277730c8849d00N.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
c38cdec01dcc26610b277730c8849d00N.dll
Resource
win10v2004-20240802-en
General
-
Target
c38cdec01dcc26610b277730c8849d00N.exe
-
Size
7KB
-
MD5
c38cdec01dcc26610b277730c8849d00
-
SHA1
d41915fba2dfc9142b853959f3144edaa89a23f3
-
SHA256
d3d6a64b051b7cb4b47b537f58ae8276d2896c2bd2b5c63d399580a62047dbb6
-
SHA512
7ee60ab00f705959de06fe53056535fca1a4b297fef22363b0228b6b0b0fe9531b093b882a317216788a509c2fe996144b1058e2d5a2fd121eee64456488ff36
-
SSDEEP
96:ubKdFn+fgXWlp3PQukZFjaGbG0AKWbzzonk2sdpMbToAS:uVgXWlZQdZBaGbG0TEzMnk2s3M/y
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c38cdec01dcc26610b277730c8849d00N.exe
Files
-
c38cdec01dcc26610b277730c8849d00N.exe.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
mscoree
_CorDllMain
Sections
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 712B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ