Static task
static1
Behavioral task
behavioral1
Sample
b10ef5c005ceab47c7b5fe458ffc0793.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
b10ef5c005ceab47c7b5fe458ffc0793.dll
Resource
win10v2004-20231215-en
General
-
Target
b10ef5c005ceab47c7b5fe458ffc0793
-
Size
110KB
-
MD5
b10ef5c005ceab47c7b5fe458ffc0793
-
SHA1
bfc9b327897d9a414b29b2810b99e7550788076b
-
SHA256
f6773a9280212e625dec5051a9d15c05367a940e36278a24d9c6e64e59f5b283
-
SHA512
dddef0a9669b6b005f7e05fa9b66f77cb46a476814d38508958742694812d723a616d8a3e776c5c9bb17567cf83d0238747b4a8ef04f5725675154e5389b4694
-
SSDEEP
3072:vyG8fseG7hjEhex3gXqqo3vBm/0Lh+Oygyb:vyGS1chw0x3gX8v0/4h+Oa
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b10ef5c005ceab47c7b5fe458ffc0793
Files
-
b10ef5c005ceab47c7b5fe458ffc0793.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
=*09-V& Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmprote Size: 91KB - Virtual size: 90KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.Resolut Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.Resolut Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ