Static task
static1
Behavioral task
behavioral1
Sample
169287048497cc20798768a526acda10cc065eb8bedff6ebc3fcebfab561c6cb6a505d3209896.dll
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
169287048497cc20798768a526acda10cc065eb8bedff6ebc3fcebfab561c6cb6a505d3209896.dll
Resource
win10v2004-20230703-en
General
-
Target
169287048497cc20798768a526acda10cc065eb8bedff6ebc3fcebfab561c6cb6a505d3209896.dat-decoded
-
Size
44KB
-
MD5
86b4e334101a25714346b0f4b800e521
-
SHA1
89211fe603f97e68d57326b49e6b5995bb934af6
-
SHA256
007b9e98279e690658f3ee0da0233f3c51669425c504c851f859a60c82181ab9
-
SHA512
cc8c65d44e077d92e4f8affe44845a4f4d12bac98dde675821505ed35570e26a557a1e7bd9825c48ede9a744ac221a75e0c4982e42d179a15fd13e152ea3e19f
-
SSDEEP
768:CyJCG+Q3S4ikYyY432WJylVzy3vLt73ZKWhz0Nn2fVCG:kN0UlmvLt73ZV1V
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 169287048497cc20798768a526acda10cc065eb8bedff6ebc3fcebfab561c6cb6a505d3209896.dat-decoded
Files
-
169287048497cc20798768a526acda10cc065eb8bedff6ebc3fcebfab561c6cb6a505d3209896.dat-decoded.dll windows x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 868B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ