Static task
static1
Behavioral task
behavioral1
Sample
238c3383a2c672598dcb144085b1e365acb46c4af8f05e830722a9faaef9ac66.dll
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
238c3383a2c672598dcb144085b1e365acb46c4af8f05e830722a9faaef9ac66.dll
Resource
win10v2004-20230915-en
General
-
Target
238c3383a2c672598dcb144085b1e365acb46c4af8f05e830722a9faaef9ac66
-
Size
545KB
-
MD5
f1f86526ff39dc11e2b7b8bc5b15e882
-
SHA1
8fd929cf9dd53d205e556174c0b74af7c7399ac0
-
SHA256
238c3383a2c672598dcb144085b1e365acb46c4af8f05e830722a9faaef9ac66
-
SHA512
9e1b5c0c0566232c2b179c18ee4958c132e0ee9979b9b61966cd7a4c22e5f05f1c0aab4cc59225e00fa951247727dbbdff01ffa0c114960fe167297d29cb9c01
-
SSDEEP
12288:158XEpdJCVL0YOB/5KlJpiblz5DBFIxRW:158XEpmhO3Kpiblz59FI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 238c3383a2c672598dcb144085b1e365acb46c4af8f05e830722a9faaef9ac66
Files
-
238c3383a2c672598dcb144085b1e365acb46c4af8f05e830722a9faaef9ac66.dll windows x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 543KB - Virtual size: 542KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 1012B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ