Static task
static1
Behavioral task
behavioral1
Sample
1691171097ca89b8ec9cd33911271affb372785d9eedf282c31b2ec641f055d41e7702dd6e714.dat-decoded.dll
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
1691171097ca89b8ec9cd33911271affb372785d9eedf282c31b2ec641f055d41e7702dd6e714.dat-decoded.dll
Resource
win10v2004-20230703-en
General
-
Target
1691171097ca89b8ec9cd33911271affb372785d9eedf282c31b2ec641f055d41e7702dd6e714.dat-decoded.dll
-
Size
13KB
-
MD5
d480519a428e4fb030a2e3e0d76b0d04
-
SHA1
3a86cbb847c01a4f69fa52c6afcd240dacd0f6c8
-
SHA256
e64eb11237cb2dcfb47736f167f281fe0b8c50a0ff1762502b60c72dc9fb0e94
-
SHA512
fdf917f150abac76bfe4153ca9ef2203830dcbc65bcabaa3c8335ff80a5ff187d050bf0376f15b17661eb8eac3e9d1713a6400f690425964ef149de7dbe2a3d9
-
SSDEEP
384:KFpQFWA/5z1NMptStJuufchFdsB2krAKHW:+pQFWw5z1NMKyh8lr5HW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1691171097ca89b8ec9cd33911271affb372785d9eedf282c31b2ec641f055d41e7702dd6e714.dat-decoded.dll
Files
-
1691171097ca89b8ec9cd33911271affb372785d9eedf282c31b2ec641f055d41e7702dd6e714.dat-decoded.dll.dll windows x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 912B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ