c:\Windows\Microsoft.NET\Framework\v4.0.30319\Temporary ASP.NET Files\root\ecb2a444\43265ecd\App_Web_r40x2w3w.pdb
Static task
static1
Behavioral task
behavioral1
Sample
edff69ac4f592b29dc538859784522f6cb0095805043cde4391575af8a5f484bN.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
edff69ac4f592b29dc538859784522f6cb0095805043cde4391575af8a5f484bN.dll
Resource
win10v2004-20240802-en
General
-
Target
edff69ac4f592b29dc538859784522f6cb0095805043cde4391575af8a5f484bN
-
Size
131KB
-
MD5
59c7d84147c3dc3254f0e7d1e5dafe80
-
SHA1
c6e832ec0d76930b66a4c8ad2396723828d33989
-
SHA256
edff69ac4f592b29dc538859784522f6cb0095805043cde4391575af8a5f484b
-
SHA512
05e059cbebb1f8313576e545e4010fec7e3d2d80dfcc3fe9f8eca0c2ed65b881db19fac738e258b2e8547b5926dc61a39ece3d7594ee9144e5c40c5413bf4d96
-
SSDEEP
1536:OuXMFIKqd7R2h8e1A7rwM7lQH0bh1/JP41rVsCVgzDLVzpfgOr5+WHnbeO:DjdnP41rBVgzDLVzpoON+WHnbeO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource edff69ac4f592b29dc538859784522f6cb0095805043cde4391575af8a5f484bN
Files
-
edff69ac4f592b29dc538859784522f6cb0095805043cde4391575af8a5f484bN.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
mscoree
_CorDllMain
Sections
.text Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 53KB - Virtual size: 53KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ