Static task
static1
Behavioral task
behavioral1
Sample
decoded-20231219131920.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
decoded-20231219131920.dll
Resource
win10-20231215-en
Behavioral task
behavioral3
Sample
decoded-20231219131920.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral4
Sample
decoded-20231219131920.dll
Resource
win11-20231215-en
General
-
Target
decoded-20231219131920.txt
-
Size
10KB
-
MD5
3c63488040bb51090f2287418b3d157d
-
SHA1
b151da806dbc8f827c511bbae34498e03904db88
-
SHA256
52575032c7eb4b3816b0e8a57ee4ea1cf19aacb32c3e2f96b8a891fe4ba2bcac
-
SHA512
fdac39ebb676cb4e7e15b8cc032170a5c660decde1cb12f06036ae3af91f063e41d6165a592b6fe40f88acd040d1a9f8105b80399ad1883448bca097088c7277
-
SSDEEP
96:tEPKBQWKeqU3ERjvhx6wF8mIf/Hp9X4YAFZmbZZy0lU8Rqmlcuueq39tMxJk:VjKeqnhx6wiBHPFAFZycu7kMxW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource decoded-20231219131920.txt
Files
-
decoded-20231219131920.txt.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 856B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ