Static task
static1
Behavioral task
behavioral1
Sample
Benign_ff7e81efcd53c66be22b5cfa598228e71da343db2dfd41ce516f29c54cd94c40.dll
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
Benign_ff7e81efcd53c66be22b5cfa598228e71da343db2dfd41ce516f29c54cd94c40.dll
Resource
win10v2004-20230703-en
General
-
Target
Benign_ff7e81efcd53c66be22b5cfa598228e71da343db2dfd41ce516f29c54cd94c40.dll
-
Size
25KB
-
MD5
d9278229349ce3ad7cd3b611d239762e
-
SHA1
ab72f52cb11d045d231f78867ab17977e4570f0b
-
SHA256
ff7e81efcd53c66be22b5cfa598228e71da343db2dfd41ce516f29c54cd94c40
-
SHA512
1b743a2576c5a87d414decb430f8a7051cc58132b06f19583bf055fbad1e4d283f7e9d5463263102750a4c4304437d5a7daad90355c8fb99ab1ce9d1bb4dff7b
-
SSDEEP
768:9W4a/TPsYNvab3oIFsig1boH6HOrZhy3WyV:0R/LRc7oogJA0OrsWyV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Benign_ff7e81efcd53c66be22b5cfa598228e71da343db2dfd41ce516f29c54cd94c40.dll
Files
-
Benign_ff7e81efcd53c66be22b5cfa598228e71da343db2dfd41ce516f29c54cd94c40.dll.dll windows x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 23KB - Virtual size: 22KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 704B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ