TDLLExportFactory
Static task
static1
Behavioral task
behavioral1
Sample
1230c058bd91e7805a0eb46f0b1a6bd2fd8b8a5a44be9bacc92650b681478d85.dll
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
1230c058bd91e7805a0eb46f0b1a6bd2fd8b8a5a44be9bacc92650b681478d85.dll
Resource
win10v2004-20230221-en
General
-
Target
1230c058bd91e7805a0eb46f0b1a6bd2fd8b8a5a44be9bacc92650b681478d85
-
Size
5.5MB
-
MD5
62d3ab0e0feff288b649e3bfd3f94adb
-
SHA1
3931bcc496c96c79f70a19370256efeb9dd90cc1
-
SHA256
1230c058bd91e7805a0eb46f0b1a6bd2fd8b8a5a44be9bacc92650b681478d85
-
SHA512
47babe1f70ad6b23ac757a097469b3e054506b6ad847ad22fd366697eaef2e59649af6d0d96dd95636c07464691463a2b62fd0ce59b43c41c83195f82556285b
-
SSDEEP
49152:LIXEa/nWeBHxlSveqPpPB7bKih1ArSHsO1qqHdybiTA4TXpHf+v6w:LIP/WeLlSNxZ7bKkOHbT0Nf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1230c058bd91e7805a0eb46f0b1a6bd2fd8b8a5a44be9bacc92650b681478d85
Files
-
1230c058bd91e7805a0eb46f0b1a6bd2fd8b8a5a44be9bacc92650b681478d85.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Exports
Exports
Sections
CODE Size: 4.1MB - Virtual size: 4.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 56KB - Virtual size: 55KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 6KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 512B - Virtual size: 82B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 343KB - Virtual size: 343KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1.0MB - Virtual size: 1.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ