Static task
static1
Behavioral task
behavioral1
Sample
6a01e510f1ce39c2569e60796272faaab9846484cdaf017f2ce169b9c0aeb341.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
6a01e510f1ce39c2569e60796272faaab9846484cdaf017f2ce169b9c0aeb341.dll
Resource
win10v2004-20231215-en
General
-
Target
6a01e510f1ce39c2569e60796272faaab9846484cdaf017f2ce169b9c0aeb341
-
Size
4.5MB
-
MD5
dd67411d87059602e08343d889c14825
-
SHA1
c62b2eb468c7f4eec1fed5eaa524409f284b4c18
-
SHA256
6a01e510f1ce39c2569e60796272faaab9846484cdaf017f2ce169b9c0aeb341
-
SHA512
08421ac95beea11a5fa121701bc21cff0f72a9f2a4643f4d60afd10b1568ee980f3a5cfaec8b9db4f4b1072df66a7d476df848b19374f9faec47fb35e131128c
-
SSDEEP
49152:VSuWbglSyt+R7ZUghrcMAiB/7gOHygOB:VSuWclSw4UghrcjiB/7gOSgO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6a01e510f1ce39c2569e60796272faaab9846484cdaf017f2ce169b9c0aeb341
Files
-
6a01e510f1ce39c2569e60796272faaab9846484cdaf017f2ce169b9c0aeb341.dll windows:4 windows x86 arch:x86
0378b118b8dee9e59c8d6a62a55c5705
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
mfc42
ord1182
ord823
ord342
ord1253
ord1168
msvcrt
_adjust_fdiv
_initterm
free
malloc
Sections
.text Size: 4KB - Virtual size: 608B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 310B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 104B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4.5MB - Virtual size: 4.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 1008B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ