c:\Windows\Microsoft.NET\Framework64\v4.0.30319\Temporary ASP.NET Files\root\8c7720f4\1c505455\App_Web_1eu2kezd.pdb
Static task
static1
Behavioral task
behavioral1
Sample
ccce4cd680fd7df29145b29a6fb8702a7bf8cc4294952b6612e40a2a0e72eb76.dll
Resource
win7-20241023-en
Behavioral task
behavioral2
Sample
ccce4cd680fd7df29145b29a6fb8702a7bf8cc4294952b6612e40a2a0e72eb76.dll
Resource
win10v2004-20241007-en
General
-
Target
ccce4cd680fd7df29145b29a6fb8702a7bf8cc4294952b6612e40a2a0e72eb76.exe
-
Size
11KB
-
MD5
ac36130d25860cce4a47a79ea19640c6
-
SHA1
528d953c387d5d2dc91a951c21e85a6b6958667c
-
SHA256
ccce4cd680fd7df29145b29a6fb8702a7bf8cc4294952b6612e40a2a0e72eb76
-
SHA512
146da0c5b5dae3ae9520d6c738f6728269448f13f4e32e6554b92aca655cbe8e5862e316a19fb2875c5ecd179b5e0f1533ec94976b55b21c173e6b2236bd4d23
-
SSDEEP
192:Zkj/Tq7ao6lh5ukv/CCflIJcu5rFJekefbHggasSrezX8BZuBNMGbU8b4:Zkj/TqsE5rFJekezHfasSrxU4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ccce4cd680fd7df29145b29a6fb8702a7bf8cc4294952b6612e40a2a0e72eb76.exe
Files
-
ccce4cd680fd7df29145b29a6fb8702a7bf8cc4294952b6612e40a2a0e72eb76.exe.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
mscoree
_CorDllMain
Sections
.text Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 504B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ