C:\Users\Administrator\Documents\CryptoObfuscator_Output\DEMONCODER.pdb
Static task
static1
Behavioral task
behavioral1
Sample
c0ae10c66edf8c07a100b3dbd62d1c5f3266a16b12a32f41faa69b4af1b6790a.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
c0ae10c66edf8c07a100b3dbd62d1c5f3266a16b12a32f41faa69b4af1b6790a.dll
Resource
win10v2004-20240802-en
General
-
Target
c0ae10c66edf8c07a100b3dbd62d1c5f3266a16b12a32f41faa69b4af1b6790a.dll
-
Size
15KB
-
MD5
7d9c5df6d1a2f85004890dc0c3d287a3
-
SHA1
6bb3be415aa1964322de405f441ab2d4b9a6dbf5
-
SHA256
c0ae10c66edf8c07a100b3dbd62d1c5f3266a16b12a32f41faa69b4af1b6790a
-
SHA512
d6bf946c9e7317a8bd6a972d9aee038d351eb1bb162d33058b1f052205c71d2b29fbf049e59702f8a7384823e8a73de085ae2c014dbd71be89d61d126c775d67
-
SSDEEP
384:9QZ/oxid7Q58lWIbjMOGykSXFxLCNSVRgO+D2wli8w1:uZVnlnjXC0gO+rl/e
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c0ae10c66edf8c07a100b3dbd62d1c5f3266a16b12a32f41faa69b4af1b6790a.dll
Files
-
c0ae10c66edf8c07a100b3dbd62d1c5f3266a16b12a32f41faa69b4af1b6790a.dll.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB Paths
Imports
mscoree
_CorDllMain
Sections
.text Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 900B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ