Static task
static1
Behavioral task
behavioral1
Sample
download.dll
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
download.dll
Resource
win10v2004-20230703-en
General
-
Target
download.exe
-
Size
16KB
-
MD5
8b47edcf4d1070cdce44f06904f75b1e
-
SHA1
eff94ae3fe0f678f19be5149eb74030ec2b0d096
-
SHA256
2d53aaa2638f9a986779b9e36a7b6dfdaddf3cc06698f4aa9f558c1a0591dc9a
-
SHA512
f32a7a314273c8b54c7ff22a76a0f0fec7d4070c5783b56ee546d21f2cc8c34fecf04d043f20593863dc1e9d1ee8f02521237bfbd569070edd50bdb40b0b7623
-
SSDEEP
384:vTREBRv39lPytXF0qLH2U+10EiCjE7OkJpm6Hp:v9EBlHPu0yH2U+1hiCUOk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource download.exe
Files
-
download.exe.dll windows x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ