Static task
static1
Behavioral task
behavioral1
Sample
e51881e58ba0fc92199d2e30acf7cc712dbccf0f2cf87db42cbf8e47b986a7af.dll
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
e51881e58ba0fc92199d2e30acf7cc712dbccf0f2cf87db42cbf8e47b986a7af.dll
Resource
win10v2004-20230703-en
General
-
Target
e51881e58ba0fc92199d2e30acf7cc712dbccf0f2cf87db42cbf8e47b986a7af
-
Size
3.9MB
-
MD5
593890bb549f95fc99679db23510e632
-
SHA1
af08b17eb81091c4d4c8e1bd84bbc3a6e2b0977f
-
SHA256
e51881e58ba0fc92199d2e30acf7cc712dbccf0f2cf87db42cbf8e47b986a7af
-
SHA512
50ae05656902a7f586bbe85425262e6d9098d246687a464d899f67d8b6e99849200d677570c990fc2930d7548896efaf437b99572b700b88af65b01f72c2a85e
-
SSDEEP
49152:cip+6ar3p+6arlqCUgxrcMAiDPogOHygOB:ciwxr3wxrlqCUgxrcjiDPogOSgO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e51881e58ba0fc92199d2e30acf7cc712dbccf0f2cf87db42cbf8e47b986a7af
Files
-
e51881e58ba0fc92199d2e30acf7cc712dbccf0f2cf87db42cbf8e47b986a7af.dll windows x86
0378b118b8dee9e59c8d6a62a55c5705
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
mfc42
ord1182
ord823
ord342
ord1253
ord1168
msvcrt
_adjust_fdiv
_initterm
free
malloc
Sections
.text Size: 4KB - Virtual size: 608B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 310B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 104B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3.9MB - Virtual size: 3.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 1008B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ