xBFJNRVZd
Static task
static1
Behavioral task
behavioral1
Sample
072198809a3fc348727f7b6571c29567ae41c59743d7dbfbd5fb5050b9b394f7.dll
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
072198809a3fc348727f7b6571c29567ae41c59743d7dbfbd5fb5050b9b394f7.dll
Resource
win10v2004-20230915-en
General
-
Target
072198809a3fc348727f7b6571c29567ae41c59743d7dbfbd5fb5050b9b394f7
-
Size
1.8MB
-
MD5
0cd700d3c30fe6c8fb41834de7467fac
-
SHA1
5fade53d3865118af01313c13c60997ab1042fd4
-
SHA256
072198809a3fc348727f7b6571c29567ae41c59743d7dbfbd5fb5050b9b394f7
-
SHA512
c74d7e21d7269fb7596dbf859520977bc688759666abfa756d94a67c1a30decabd1eb157664a6313f8aadd8a8afa17a3b74a56539f293516c61c43e2e766ceea
-
SSDEEP
49152:q1EexXh1CcPT/y+vH3JyGEd2J7VXX8Pkz+6tpl+e4vIOc7GLV67x8KBDz8:qVB+6tpl+e4vIO9567s
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 072198809a3fc348727f7b6571c29567ae41c59743d7dbfbd5fb5050b9b394f7
Files
-
072198809a3fc348727f7b6571c29567ae41c59743d7dbfbd5fb5050b9b394f7.dll windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
.text Size: 4KB - Virtual size: 1.3MB
IMAGE_SCN_MEM_READ
king Size: 704KB - Virtual size: 704KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
king Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
king Size: 4KB - Virtual size: 4KB
IMAGE_SCN_MEM_READ
king Size: 8KB - Virtual size: 8KB
IMAGE_SCN_MEM_READ
king Size: 4KB - Virtual size: 4KB
IMAGE_SCN_MEM_READ