Static task
static1
Behavioral task
behavioral1
Sample
b018700b05aa995f.dll
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
b018700b05aa995f.dll
Resource
win10v2004-20230220-en
General
-
Target
b018700b05aa995f.dll
-
Size
41KB
-
MD5
8f17f9e49729381e096044130258b132
-
SHA1
0b7e6aa0af8aa09f3231ee3bbabc1478d9f2fef1
-
SHA256
174f80469f10222693fd53f9d9ff3a01051c076d4fc9ac7376798925371412a0
-
SHA512
44108dfab3901f3f22f8996736b1f2aa590e8d575894a79c3dee35d1bffa1581aafdf9180be886fc69ec792e22d2b2c7500cff5717c8c1e260bfd5c33bf62bf0
-
SSDEEP
768:dCEL8xI0CjxJVNje7uG6MmkjCoseEXU3bOl1cIlS+TL/+x/6l:d3L3xJ2776F2jseEXU3ba1cIlS+H+xil
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b018700b05aa995f.dll
Files
-
b018700b05aa995f.dll.dll windows x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorDllMain
Sections
.text Size: 39KB - Virtual size: 38KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 816B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ