d:\Personal\Temp\yfxpskx3.pdb
Static task
static1
Behavioral task
behavioral1
Sample
16ae52509fcd4fb28da088cd6a75f6558775352da61a10695cc3232afb2a5714.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
16ae52509fcd4fb28da088cd6a75f6558775352da61a10695cc3232afb2a5714.dll
Resource
win10v2004-20240802-en
General
-
Target
16ae52509fcd4fb28da088cd6a75f6558775352da61a10695cc3232afb2a5714
-
Size
5KB
-
MD5
7249761d74ca4f6e150bf0021b16d7fa
-
SHA1
0373d7cb100627ab287e9a3ba0de22e7c09974e2
-
SHA256
16ae52509fcd4fb28da088cd6a75f6558775352da61a10695cc3232afb2a5714
-
SHA512
7a3069aaaa292058cf14495e43f19dd7662a2fd44c2bd03777578ce5baa292b911eb7cf5c07d273f8e38f5d7f0377625ab32944bfd043e8aac7103f80ac3efed
-
SSDEEP
48:6wb7fjFc4v5BHlFFKcataHMmCSXU3uJ9Kk3CBjln9o54vBkzWUbtF81ul8a3wq:x7fG4v5BHJItas2Uv7n+aveaQNaK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 16ae52509fcd4fb28da088cd6a75f6558775352da61a10695cc3232afb2a5714
Files
-
16ae52509fcd4fb28da088cd6a75f6558775352da61a10695cc3232afb2a5714.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
mscoree
_CorDllMain
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 680B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ