Static task
static1
Behavioral task
behavioral1
Sample
54161f59afde6f9d81148aae429814e9.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
54161f59afde6f9d81148aae429814e9.dll
Resource
win10v2004-20231201-en
General
-
Target
54161f59afde6f9d81148aae429814e9
-
Size
959KB
-
MD5
54161f59afde6f9d81148aae429814e9
-
SHA1
5b26988ee757efcd111b595145167b67514b6bba
-
SHA256
8698218f0e918e267c78f34d7b39efd276d9cf0d2daec2a85496e8c156912543
-
SHA512
6506a0b28de1dba0e4d5b65b527cfca53477722ecfe359f4fa72209c300bcd3f83eadf04fe72713140aca22a850ea53f9af1a8aba5b40fd98549595f7b2cec00
-
SSDEEP
24576:9PmUt/u2f8THLYM2UGGcOzDDqkB02DRbNRYilN3xa0vvw6xPrvuygaPkbDf59cMt:dmEutTHLYMXrDuwprRYilN3xa0vvw6lG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 54161f59afde6f9d81148aae429814e9
Files
-
54161f59afde6f9d81148aae429814e9.dll windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 454KB - Virtual size: 453KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 596KB - Virtual size: 596KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 646KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ