Static task
static1
Behavioral task
behavioral1
Sample
9a1b914adf78ba2058a2c9219c164128020dfe60c017991522fd53ceba4c201d.dll
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
9a1b914adf78ba2058a2c9219c164128020dfe60c017991522fd53ceba4c201d.dll
Resource
win10v2004-20230703-en
General
-
Target
83d1f5b9f00930cdef210e5b6d1329e2.bin
-
Size
1KB
-
MD5
dc125be2302b0765939d756fecede7dc
-
SHA1
7d48d13e946ee5960034e51b2f06178066ba5f37
-
SHA256
5065d9178dbdab96152a00daf88a20c64671b3841e2a7ce7d02fe35ae1300946
-
SHA512
876de79cb792c37d08d2372da27c3229f1a2505a6426148dbf38c4b60cefe148aacfb03aba0b4fe63c9a3c918da36cdb771f37598443156c4fa6649c85b7ec31
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/9a1b914adf78ba2058a2c9219c164128020dfe60c017991522fd53ceba4c201d.bin
Files
-
83d1f5b9f00930cdef210e5b6d1329e2.bin.zip
Password: infected
-
9a1b914adf78ba2058a2c9219c164128020dfe60c017991522fd53ceba4c201d.bin.dll windows x86
Password: infected
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorDllMain
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ