Static task
static1
Behavioral task
behavioral1
Sample
eztppyc3.bin.dll
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
eztppyc3.bin.dll
Resource
win10v2004-20230915-en
General
-
Target
eztppyc3.bin.dll
-
Size
3KB
-
MD5
02288aebc30ae31bda4a1a7aab94d9fe
-
SHA1
7447229d0edf6f2d8a52f27a21939cabbebca1df
-
SHA256
e06a5ff849bc95a97d0a4d4c62a7171cd1de63938d674a4e500714d463ddba28
-
SHA512
0c80f1ae6567c6ed4426a7c445ec6d60d8c717ecc564f18f95472176716009ba9f6c2bb532adc5fadb4dfffa2c915654d7853d81b07aba1902fe0d313b121c96
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource eztppyc3.bin.dll
Files
-
eztppyc3.bin.dll.dll windows:4 windows x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 680B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ