c:\Users\Administrator\AppData\Local\Temp\szv_l75q.pdb
Static task
static1
Behavioral task
behavioral1
Sample
b564d136fce474b77fa2977c4af57c0ca564749038e66e1e756aab9858d95c31.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
b564d136fce474b77fa2977c4af57c0ca564749038e66e1e756aab9858d95c31.dll
Resource
win10v2004-20241007-en
General
-
Target
b564d136fce474b77fa2977c4af57c0ca564749038e66e1e756aab9858d95c31
-
Size
4KB
-
MD5
8d1a29442184d30f92f728effb278c39
-
SHA1
e8249af5c65f16d7d2c46d3c81eade5da094f90d
-
SHA256
b564d136fce474b77fa2977c4af57c0ca564749038e66e1e756aab9858d95c31
-
SHA512
7a11d98227c044e201f5c0e9e5e54155e76540d621328d3c843b0149ea75cd2df64955de185842077033c3a0654abd782b07602bdf978db9e5dc95b7f0684c2c
-
SSDEEP
48:6JWIBHWsTZa0Ch5kl+A0i186QZdiJvCj35QVao0z1NAdhLjzx2t1ulG6a3Xhq:HIBrZPCy+zm86uVCo1qdNj/s6KX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b564d136fce474b77fa2977c4af57c0ca564749038e66e1e756aab9858d95c31
Files
-
b564d136fce474b77fa2977c4af57c0ca564749038e66e1e756aab9858d95c31.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
mscoree
_CorDllMain
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 680B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ