Static task
static1
Behavioral task
behavioral1
Sample
1692958005f29a996e6a924275c768c307dea6e4aa5b69767f5a6acf9f2b7cbae9dc912797721.dat-decoded.dll
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
1692958005f29a996e6a924275c768c307dea6e4aa5b69767f5a6acf9f2b7cbae9dc912797721.dat-decoded.dll
Resource
win10v2004-20230703-en
General
-
Target
1692958005f29a996e6a924275c768c307dea6e4aa5b69767f5a6acf9f2b7cbae9dc912797721.dat-decoded.dll
-
Size
2.1MB
-
MD5
2ffc188385c5ced9a4cb7e46ea24d2fb
-
SHA1
ff748c4e14082e4874d14396c859020c556d66b7
-
SHA256
9050130468a0079a69af507a71b1a558242f60120b0ee9ae493a279dd021a293
-
SHA512
b1a189b25167577a3ddce81da02861885c2ba439c6bc7c7e41504b4ca12a29064a817bbdd3bed2f95d643ee9e6f2dc96029fcd5b5038d398e071341ffc93c95c
-
SSDEEP
24576:GFlE1xrJfxT1el3KSquRG+Z7Kvodi4I4dyu+QUF0elQKL8INXV9WR1df9UzjgM/8:H/Jfx3Y5UFeKvNCJ9Uz0w1LYT3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1692958005f29a996e6a924275c768c307dea6e4aa5b69767f5a6acf9f2b7cbae9dc912797721.dat-decoded.dll
Files
-
1692958005f29a996e6a924275c768c307dea6e4aa5b69767f5a6acf9f2b7cbae9dc912797721.dat-decoded.dll.dll windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 3.1MB - Virtual size: 3.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 804B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ