c:\Program Files\Microsoft Enterprise Library January 2006\src\Logging\TraceListeners\Database\Configuration\Design\obj\Debug\Microsoft.Practices.EnterpriseLibrary.Logging.Database.Configuration.Design.pdb
Static task
static1
Behavioral task
behavioral1
Sample
Microsoft.Practices.EnterpriseLibrary.Logging.Database.Configuration.Design.1.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
Microsoft.Practices.EnterpriseLibrary.Logging.Database.Configuration.Design.1.dll
Resource
win10v2004-20240802-en
General
-
Target
Microsoft.Practices.EnterpriseLibrary.Logging.Database.Configuration.Design.1.dll
-
Size
28KB
-
MD5
2831ef7a8fe22b76044987eff4e2acb2
-
SHA1
b03cccb5509ffd93aed5ac681a467fc142d60628
-
SHA256
d310dea3f241c41854ca1384df11250e36c285995f968d6e887b32b8a90ce3b2
-
SHA512
aee54e6190136ad40766b71da314cd71a31b082e18db733e44e96e686fb29274a7ff3d68ea6f96ae065f3218a76281dc64125cc667b0547a85d35c0cbef353cb
-
SSDEEP
384:oFj5qL1RinnnuvAHFyGLUTnyOM0y1X93d0sNGZPbwXM2bR7PTs0kDybiiSPPQWz/:oFFm3innnuvUTmsWV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Microsoft.Practices.EnterpriseLibrary.Logging.Database.Configuration.Design.1.dll
Files
-
Microsoft.Practices.EnterpriseLibrary.Logging.Database.Configuration.Design.1.dll.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
mscoree
_CorDllMain
Sections
.text Size: 16KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ