Static task
static1
Behavioral task
behavioral1
Sample
ea01b722ad11a1694037928177ef1894.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
ea01b722ad11a1694037928177ef1894.dll
Resource
win10v2004-20231215-en
General
-
Target
ea01b722ad11a1694037928177ef1894
-
Size
78KB
-
MD5
ea01b722ad11a1694037928177ef1894
-
SHA1
df491747c749686cd7c930388bc8201c0c6af696
-
SHA256
598a2c654bc27ac982d56d6f00fabe29634b67e9bae6a134ceab50e61f7b54eb
-
SHA512
28218df6ea5d45862ca994a5ca3107f14c04011401581d96aa29735cffcc12a46635bef87d5fbdb518ed6198c7c7ff2731f183b63a9f22d8e463a433610ce4eb
-
SSDEEP
768:URRGDWJ9Ue/DlqZrrhaaFWtL3pK8FL7Ytf/adWRM0mFEh1NKVM1Dxw7XaPg:aWWrDp0rtaRNzL4/IJm3KVM1Dxw7XaPg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ea01b722ad11a1694037928177ef1894
Files
-
ea01b722ad11a1694037928177ef1894.dll windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 77KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 57KB - Virtual size: 57KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 43KB - Virtual size: 51KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 436B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ