dnlib.pdb
Static task
static1
Behavioral task
behavioral1
Sample
9204167d6ee4e10d7aa2668b1d1cd356c0049053c3a0afff80558309ae842f25.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
9204167d6ee4e10d7aa2668b1d1cd356c0049053c3a0afff80558309ae842f25.dll
Resource
win10v2004-20241007-en
General
-
Target
9204167d6ee4e10d7aa2668b1d1cd356c0049053c3a0afff80558309ae842f25.dll
-
Size
4.3MB
-
MD5
ae9bff09ae8e55ec3a23258fac0165be
-
SHA1
a65abb0c55d2ab711153ee5dbc9466b5376dc968
-
SHA256
9204167d6ee4e10d7aa2668b1d1cd356c0049053c3a0afff80558309ae842f25
-
SHA512
d870de092d3a5bb106beebe99a040e7bffd7fb620c1b0979efc530fdc78f0da83c09c779b0851ffdd208967827974553bd8310769c347d82bab36024c0717adb
-
SSDEEP
49152:HkchngWS2a4aWv8bEqzN9APORfcpb9ssImxRtdvtEBOdOkHKW4K9Q17vVAkcZfS0:WfN6WBIggun8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9204167d6ee4e10d7aa2668b1d1cd356c0049053c3a0afff80558309ae842f25.dll
Files
-
9204167d6ee4e10d7aa2668b1d1cd356c0049053c3a0afff80558309ae842f25.dll.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
mscoree
_CorDllMain
Sections
.text Size: 4.3MB - Virtual size: 4.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 976B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ