Static task
static1
Behavioral task
behavioral1
Sample
168874695393d5c4487a6a50f5e204d46211fd6619b471c831cec533d1f63a54ba597252bc507.dat-decoded.dll
Resource
win7-20230703-en
Behavioral task
behavioral2
Sample
168874695393d5c4487a6a50f5e204d46211fd6619b471c831cec533d1f63a54ba597252bc507.dat-decoded.dll
Resource
win10v2004-20230703-en
General
-
Target
168874695393d5c4487a6a50f5e204d46211fd6619b471c831cec533d1f63a54ba597252bc507.dat-decoded.dll
-
Size
2.8MB
-
MD5
305e49395b9495b69c88fafdff771b0e
-
SHA1
6912d1c63fae7cdda1aa11eb3a69af7d8cb16f80
-
SHA256
cf28022edef1f38d7876a22e54d670a17ad7a663fe6d630f8b4e33638d6ef539
-
SHA512
fe5765ed8122519ca3ee6d26df181051d0c8422ee174385343e294d2e75f0902158b56a9fd31bd31a45809dc5d5073876abce7916fa52a9c93d6ca6b09ce9be2
-
SSDEEP
24576:7ZSjHZm/elolWzslM45T1pYJFmc6V1ZZBDdfcNf/x7xVKB0GT83ez0XFD75NzNMx:7uZm/ulsF5avew4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 168874695393d5c4487a6a50f5e204d46211fd6619b471c831cec533d1f63a54ba597252bc507.dat-decoded.dll
Files
-
168874695393d5c4487a6a50f5e204d46211fd6619b471c831cec533d1f63a54ba597252bc507.dat-decoded.dll.dll windows x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorDllMain
Sections
.text Size: 2.8MB - Virtual size: 2.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 804B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ