Static task
static1
Behavioral task
behavioral1
Sample
d70b19b991f3c290801812cbaf94ca3a568c78d8c399ff4f0349ed547a62b2d6.dll
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
d70b19b991f3c290801812cbaf94ca3a568c78d8c399ff4f0349ed547a62b2d6.dll
Resource
win10v2004-20231023-en
General
-
Target
d70b19b991f3c290801812cbaf94ca3a568c78d8c399ff4f0349ed547a62b2d6
-
Size
297KB
-
MD5
f00f499af67b90f5e7471e63c45733cf
-
SHA1
70b18e56dbd7ad6314d25882e423ee81c47c516e
-
SHA256
d70b19b991f3c290801812cbaf94ca3a568c78d8c399ff4f0349ed547a62b2d6
-
SHA512
5cddb2df5c94b8a40c50bb98d907a77dd52d2fcbbba3abbdb2ff8e94a40d23916c32e3c1bcd10f052cb060d856b377f6b6def9d429c8e2d16ea4905e42eca032
-
SSDEEP
3072:iE5U1s77kxT27xmX+cpn8XPPa8JDlPPbW7Flq2blB7L7iztuIsEUR7QkcSyK70ef:iE5UtNCgWg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d70b19b991f3c290801812cbaf94ca3a568c78d8c399ff4f0349ed547a62b2d6
Files
-
d70b19b991f3c290801812cbaf94ca3a568c78d8c399ff4f0349ed547a62b2d6.dll windows:4 windows x86
e07e00e45407ff0dd6abc9eaa981fa7b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
msvcrt
_initterm
malloc
_adjust_fdiv
free
Sections
.text Size: 512B - Virtual size: 340B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 138B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 36B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 294KB - Virtual size: 293KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 324B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ