Static task
static1
Behavioral task
behavioral1
Sample
5044-12-0x000001F9BD770000-0x000001F9BD874000-memory.dll
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
5044-12-0x000001F9BD770000-0x000001F9BD874000-memory.dll
Resource
win10v2004-20231023-en
General
-
Target
5044-12-0x000001F9BD770000-0x000001F9BD874000-memory.dmp
-
Size
1.0MB
-
MD5
d363410d02d85fa1d9f97e2357ae5182
-
SHA1
a3e4dcd6a44b827e8f41d2ff1106c3d6069bb252
-
SHA256
3db5f7a53ee2fc6368192ac1ce0fc657334046617bd9f3577a82358ce15ab59c
-
SHA512
8cccb219229106fa9fe140e422fdc6bd959fccb02d501f455c555702466db866b5d4995b14b0e73407de69e3eaf8173bcf38cb40af0b73e68f6fc700958658e4
-
SSDEEP
24576:Y9km6k/IwRYbiBeKGCMiwdp8dJjgCGKgqYldBK:Y9sk/IRUnMEdJECGKqBK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5044-12-0x000001F9BD770000-0x000001F9BD874000-memory.dmp
Files
-
5044-12-0x000001F9BD770000-0x000001F9BD874000-memory.dmp.dll windows:4 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 1009KB - Virtual size: 1008KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ