c:\Users\Lenvov\AppData\Local\Temp\Temporary ASP.NET Files\yxsx\b16a4fb1\516e0bbc\App_Web_vj35xpqc.pdb
Static task
static1
Behavioral task
behavioral1
Sample
a1ec99dbe3e064c3b457d93790356b175cd612e313000d4a8f3fd76544833ff7.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
a1ec99dbe3e064c3b457d93790356b175cd612e313000d4a8f3fd76544833ff7.dll
Resource
win10v2004-20241007-en
General
-
Target
a1ec99dbe3e064c3b457d93790356b175cd612e313000d4a8f3fd76544833ff7
-
Size
164KB
-
MD5
ca50733e9f1db581c8158ae34e6f30f5
-
SHA1
a0b27df5442fa56eabe838cb0fd12e77b02c97bf
-
SHA256
a1ec99dbe3e064c3b457d93790356b175cd612e313000d4a8f3fd76544833ff7
-
SHA512
132041e868cbb246eaf3f453b0920d2f0430a7914a6e9235764cf5f4f4abe35faf385e5196d2458e459edc90c976361bd8957f08d62adbc9e82144046d96a4ba
-
SSDEEP
3072:7hSFVlSmGlLqZSCF+BhoPg78xqbsvm6c69T5RtVvG4JLNAo+lY9LI3Yup:7hSFVlSmGleZSCF+BhoPg78xqQvm6c6c
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a1ec99dbe3e064c3b457d93790356b175cd612e313000d4a8f3fd76544833ff7
Files
-
a1ec99dbe3e064c3b457d93790356b175cd612e313000d4a8f3fd76544833ff7.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
mscoree
_CorDllMain
Sections
.text Size: 151KB - Virtual size: 151KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ