Static task
static1
Behavioral task
behavioral1
Sample
easy_Benign_ffed2858c8e79c942827172a7650de6084be8ac5007883598a3802e6a1778ba5.dll
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
easy_Benign_ffed2858c8e79c942827172a7650de6084be8ac5007883598a3802e6a1778ba5.dll
Resource
win10v2004-20230703-en
General
-
Target
easy_Benign_ffed2858c8e79c942827172a7650de6084be8ac5007883598a3802e6a1778ba5.dll
-
Size
22KB
-
MD5
43d0d4590b715e35856f1223b003b457
-
SHA1
5ca0faacad5595ac5b3fb71e1fdefb30d9a3cb5a
-
SHA256
ffed2858c8e79c942827172a7650de6084be8ac5007883598a3802e6a1778ba5
-
SHA512
7408eb6f858d31d3202ea41cb654166d57425a4f426e5c5df95bcaf8f6ef829b623c67ca291c2b56761bf8c22b3f3abd952eb0a28a68ec0c46596466c9331928
-
SSDEEP
384:4U5iy7OTqYZr6c17PgYD41m7c18erWHLV9Pg5hJ+Yb+2:vOTrucPsRmLV9Pg5yYbx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource easy_Benign_ffed2858c8e79c942827172a7650de6084be8ac5007883598a3802e6a1778ba5.dll
Files
-
easy_Benign_ffed2858c8e79c942827172a7650de6084be8ac5007883598a3802e6a1778ba5.dll.dll windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.xdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 984B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ