Static task
static1
Behavioral task
behavioral1
Sample
2c11f8fe7d0ff66fd3f7783b70ba795033135e1ddc590c299517bdcb273fc419.dll
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
2c11f8fe7d0ff66fd3f7783b70ba795033135e1ddc590c299517bdcb273fc419.dll
Resource
win10v2004-20230703-en
General
-
Target
2c11f8fe7d0ff66fd3f7783b70ba795033135e1ddc590c299517bdcb273fc419
-
Size
506KB
-
MD5
ef3b2b7d16897c4ffdcca21489103c5c
-
SHA1
87186d35da6f7831b5000033b39c44388a448686
-
SHA256
2c11f8fe7d0ff66fd3f7783b70ba795033135e1ddc590c299517bdcb273fc419
-
SHA512
054b8586ca4ba52c8a1dd76a18d550a9c3fbfd40d9fd1e573884addc36dba4d9e582cc2ba382cf726c10abb18d8506b5e58817175aad49ccffa3cc52edf0fb06
-
SSDEEP
3072:HfJhRwF8z2RP82HNfCjWsRnuxBeCySmDhBhUNYanD0FQIaThJKS3W447EMq:RhRJaRP3NfOWsRztUKaDgKhUS3k
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2c11f8fe7d0ff66fd3f7783b70ba795033135e1ddc590c299517bdcb273fc419
Files
-
2c11f8fe7d0ff66fd3f7783b70ba795033135e1ddc590c299517bdcb273fc419.dll windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Sections
.text Size: 504KB - Virtual size: 504KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ