c:\Users\86137\AppData\Local\Temp\Temporary ASP.NET Files\homestaysystem\7fadd99a\e69d9c1a\App_Web_gpbf250o.pdb
Static task
static1
Behavioral task
behavioral1
Sample
65ecd7e99b53d64578b5e17e5c5cc787e9064009d7dd04dca6f0a639b0afdfd5.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
65ecd7e99b53d64578b5e17e5c5cc787e9064009d7dd04dca6f0a639b0afdfd5.dll
Resource
win10v2004-20241007-en
General
-
Target
65ecd7e99b53d64578b5e17e5c5cc787e9064009d7dd04dca6f0a639b0afdfd5
-
Size
72KB
-
MD5
71f1cba1333275f0b0ee603b8cbaf317
-
SHA1
b9f148a36b5fb94a55ac33dbe294d751ef3fa323
-
SHA256
65ecd7e99b53d64578b5e17e5c5cc787e9064009d7dd04dca6f0a639b0afdfd5
-
SHA512
2710753f77c51d5edea5bbc1b17d05b489f41da2bd5e67aae0308626909afebe2a492fcba9422d4b383734ee96c76e195c5c15497356740cc4955d9d7da267d5
-
SSDEEP
768:5xNKWqw6A7UF0VXIvUjATI5UXwRzLxSsEzqj4AT055WjgSTy:LN/qwZU+XIvU+I5UWz0m4K0TWjgST
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 65ecd7e99b53d64578b5e17e5c5cc787e9064009d7dd04dca6f0a639b0afdfd5
Files
-
65ecd7e99b53d64578b5e17e5c5cc787e9064009d7dd04dca6f0a639b0afdfd5.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
mscoree
_CorDllMain
Sections
.text Size: 71KB - Virtual size: 70KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 488B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ