DiminishingReturns.pdb
Static task
static1
Behavioral task
behavioral1
Sample
199e0274ea815aa863905c3f9732aa2eb83bbe598763a7f615e9ffb94a5c1f61N.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
199e0274ea815aa863905c3f9732aa2eb83bbe598763a7f615e9ffb94a5c1f61N.dll
Resource
win10v2004-20240802-en
General
-
Target
199e0274ea815aa863905c3f9732aa2eb83bbe598763a7f615e9ffb94a5c1f61N.exe
-
Size
32KB
-
MD5
a7c812adba255d4c0adcbded2c44faa0
-
SHA1
c0d8f316810959159079ff14806a3adf7eae4fdf
-
SHA256
199e0274ea815aa863905c3f9732aa2eb83bbe598763a7f615e9ffb94a5c1f61
-
SHA512
0dd3062ff562591402426b3fbd8d9585f0301bc409e22af99c47cf061a8bdb1db9d0595eb175c2875e74de526b4651234563283748c0fcd9a4ce25febce704f4
-
SSDEEP
384:t0E+qy96eTJePeP27wYTT0FKIo4t3a28kCwmPlEOUgAHf2KToU7rR7i/g1K10V2+:t0PhssYTAFvt368HuKTo6RWg1K10VZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 199e0274ea815aa863905c3f9732aa2eb83bbe598763a7f615e9ffb94a5c1f61N.exe
Files
-
199e0274ea815aa863905c3f9732aa2eb83bbe598763a7f615e9ffb94a5c1f61N.exe.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
mscoree
_CorDllMain
Sections
.text Size: 30KB - Virtual size: 30KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 1000B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ