lniZDHKNPT
Static task
static1
Behavioral task
behavioral1
Sample
410c5d082e5dd97fab5d205ef46ba981e7b32b8f45304f231db0e0d1f2779268.dll
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
410c5d082e5dd97fab5d205ef46ba981e7b32b8f45304f231db0e0d1f2779268.dll
Resource
win10v2004-20230915-en
General
-
Target
410c5d082e5dd97fab5d205ef46ba981e7b32b8f45304f231db0e0d1f2779268
-
Size
1.9MB
-
MD5
f285f6865f53df71d45791a3ab97e9bb
-
SHA1
d4c4d3c3f597f5db82c656cf09b7fe8bfa02b33a
-
SHA256
410c5d082e5dd97fab5d205ef46ba981e7b32b8f45304f231db0e0d1f2779268
-
SHA512
ccfed38248642ba787b3565f342165b0d6ab3703293dc1f61a683b8b460713dcfdd3b167d4cf32281d1e339d6956a3b40fb1d074afdb7aa6f8f72503c4b8e4df
-
SSDEEP
49152:31Eex+I4jJ6T/y7+SWgzf58bgyAeStKNOmi8lQCq6ccDaH+nZH6OGF+8EwGBqE9M:lT6mi1C/DaAZH6Ou+/wGAEK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 410c5d082e5dd97fab5d205ef46ba981e7b32b8f45304f231db0e0d1f2779268
Files
-
410c5d082e5dd97fab5d205ef46ba981e7b32b8f45304f231db0e0d1f2779268.dll windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
.text Size: 4KB - Virtual size: 1.3MB
IMAGE_SCN_MEM_READ
data Size: 704KB - Virtual size: 704KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
data Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_MEM_READ
data Size: 8KB - Virtual size: 8KB
IMAGE_SCN_MEM_READ
data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_MEM_READ