steam
Static task
static1
Behavioral task
behavioral1
Sample
644807211a175cd16baf2997bb6744116b016435fbdb9c3cbf878eda5619c58d.dll
Resource
win7-20231023-en
General
-
Target
644807211a175cd16baf2997bb6744116b016435fbdb9c3cbf878eda5619c58d
-
Size
165KB
-
MD5
94d0e300a7f2a776aeedcc8cbe89608f
-
SHA1
4f267a91388b1417df1708a9c1c7d5819e930920
-
SHA256
644807211a175cd16baf2997bb6744116b016435fbdb9c3cbf878eda5619c58d
-
SHA512
9f82338ad7e1617bbaf71c76af956f9452a98fd88a4c60e392cc467797bc806320ba4df0fa925ead002a3b8ff7031f7e97793663de382e294c2c30aa88fabc8f
-
SSDEEP
3072:Kb/eheKTmsD9lCLSPQg8g6ZPAGuXz3Q8wELg98mm/CG5jO7li:K8eEAg8g6ZP6FwSVmS5j1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 644807211a175cd16baf2997bb6744116b016435fbdb9c3cbf878eda5619c58d
Files
-
644807211a175cd16baf2997bb6744116b016435fbdb9c3cbf878eda5619c58d.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
.nsp0 Size: - Virtual size: 248KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 164KB - Virtual size: 168KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE