Static task
static1
Behavioral task
behavioral1
Sample
virus2.dll
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
virus2.dll
Resource
win10v2004-20230220-en
General
-
Target
virus2.dll
-
Size
970KB
-
MD5
ccce64a80e4de4e3f9b55d5272d6ca8a
-
SHA1
6066734802cce19a3d5aba9b04e6b8a98ca1783a
-
SHA256
4408d64036e0980248f4d42f519cd78de55bb6b23ff9880276e04662398283fa
-
SHA512
389181c37472d885eb71b9e613147f830acf73371af46a8caeacf2563a120dd9fbde84353bbb1cd5ff46932b2040c2a6dd11e1398b2724ead91153361ef1f41c
-
SSDEEP
24576:mPnEknW8ts2y6gJTrFJ0JJV2ch39lKsj75IXHZ3GZJ:oEuz7YTrFwzj75yY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource virus2.dll
Files
-
virus2.dll.dll windows x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorDllMain
Sections
.text Size: 968KB - Virtual size: 967KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 844B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ