Static task
static1
General
-
Target
quantity.dll
-
Size
7.2MB
-
MD5
2551427e043d9f308fce28cc8b9dad78
-
SHA1
b62c958e39ee8430244868144e09e172655ba621
-
SHA256
10669e63ebe6616b6045b9cd388c33d1c68c14d4a7059dba506337e10df6055a
-
SHA512
0227d4da4f2eafc86692401606dbef811938a0a5e9a2de01825d32093a5a4b31a1a426f734b91af746119e9ad45f606a04f3a23092933b0f352957b0bf559998
-
SSDEEP
98304:YrNSZZwVxLCqe76utS09s1ZV9y3hY8f/nzusS4p8SFlm6xNCC+KH4kpc+DX/0H7:/ExC76uWg3vfNnCoN8KYOD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource quantity.dll
Files
-
quantity.dll.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 7.2MB - Virtual size: 7.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ