c:\Users\Richard\AppData\Local\Temp\Temporary ASP.NET Files\root\9a943354\7f4b1d08\App_Web_zea5cuyf.pdb
Static task
static1
Behavioral task
behavioral1
Sample
f5115bf3243558fb45a40967c1f8b2651dbff9818cc99c73ff7efe26e9d25fb4.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f5115bf3243558fb45a40967c1f8b2651dbff9818cc99c73ff7efe26e9d25fb4.dll
Resource
win10v2004-20241007-en
General
-
Target
f5115bf3243558fb45a40967c1f8b2651dbff9818cc99c73ff7efe26e9d25fb4
-
Size
7KB
-
MD5
db667eaf3fbe88c0c4da5d8380993f2d
-
SHA1
65362d1b8426c5165973936b922e0b07f0fd5f96
-
SHA256
f5115bf3243558fb45a40967c1f8b2651dbff9818cc99c73ff7efe26e9d25fb4
-
SHA512
8883e086a8c80fa65d414992f27bc6d714854604668a178b1a88120ed259fedcec7dc3ee5fd8bf3b7c6ed1f19505557a9b1eafe434fb7f0deec8b00a5a94eb6d
-
SSDEEP
96:pW6vE8Z2adfl9xYqaGa6vakGvaobsiTKgeaEawKbEKqpMPL8o:1BgJG/SkGvaobfTKGECbEK8M
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f5115bf3243558fb45a40967c1f8b2651dbff9818cc99c73ff7efe26e9d25fb4
Files
-
f5115bf3243558fb45a40967c1f8b2651dbff9818cc99c73ff7efe26e9d25fb4.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
mscoree
_CorDllMain
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 768B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ