Static task
static1
Behavioral task
behavioral1
Sample
35faf29a5b5b8e1c84368b2a98c08ea3af6f51608f7c15b9f51d54c3f2821198.dll
Resource
win7-20230703-en
Behavioral task
behavioral2
Sample
35faf29a5b5b8e1c84368b2a98c08ea3af6f51608f7c15b9f51d54c3f2821198.dll
Resource
win10v2004-20230703-en
General
-
Target
1307fce5c7e07616c6dbf72f556ef197.bin
-
Size
1.0MB
-
MD5
2ea1f2338d609a67368b2c150fc962a2
-
SHA1
7278b6eaac7244cba779fa414c280a929805958e
-
SHA256
aabe931c68cb67c84c5f40cad77773abe92afb27039474e2d1b80b26906c0cef
-
SHA512
aae9adb5f601b162ee77e6889333906123cf122d76b764225416d181dc5a451c3de738eea259563cd5189d495509711d921055c0a8c12679ba1e40ac44f68e7a
-
SSDEEP
24576:627v6JyBUE2OK3NPK0KQnh9SUzxNEIheohI24ltdXq5hJ:37vyyBUE2OeNPK0KQ5NhEohIvGhJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/35faf29a5b5b8e1c84368b2a98c08ea3af6f51608f7c15b9f51d54c3f2821198.dll
Files
-
1307fce5c7e07616c6dbf72f556ef197.bin.zip
Password: infected
-
35faf29a5b5b8e1c84368b2a98c08ea3af6f51608f7c15b9f51d54c3f2821198.dll.dll windows x86
Password: infected
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 147KB - Virtual size: 147KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 967KB - Virtual size: 966KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 96B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ