ADHMOSWaei
Static task
static1
Behavioral task
behavioral1
Sample
a3a1b572ba5c55e090a5aea3f14c64a46fd032a987d1426e5627e581207a0754.dll
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
a3a1b572ba5c55e090a5aea3f14c64a46fd032a987d1426e5627e581207a0754.dll
Resource
win10v2004-20230915-en
General
-
Target
a3a1b572ba5c55e090a5aea3f14c64a46fd032a987d1426e5627e581207a0754
-
Size
1.9MB
-
MD5
7a06a130b94eb70ddac5639d47772409
-
SHA1
7cb41f93c2bb0e5e3141ccb539a2cac67a35d884
-
SHA256
a3a1b572ba5c55e090a5aea3f14c64a46fd032a987d1426e5627e581207a0754
-
SHA512
a5bf6a1acb89e17dfd7992eba60afd823995e18b472ad1af5fb2ff40f972ebf83d3e693a596cf966a21daf0ff2723c52b0c9658b4e4163ee7131f2a62eb70e82
-
SSDEEP
49152:31Eex+I4jJ6T/y7+SWgzf58bgyAeStKNOmi8lQCq6ccDaH+nZH6OGF+8EwGBqErM:lT6mi1C/DaAZH6Ou+/wGAEY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a3a1b572ba5c55e090a5aea3f14c64a46fd032a987d1426e5627e581207a0754
Files
-
a3a1b572ba5c55e090a5aea3f14c64a46fd032a987d1426e5627e581207a0754.dll windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
.text Size: 4KB - Virtual size: 1.3MB
IMAGE_SCN_MEM_READ
data Size: 704KB - Virtual size: 704KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
data Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_MEM_READ
data Size: 8KB - Virtual size: 8KB
IMAGE_SCN_MEM_READ
data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_MEM_READ