Static task
static1
Behavioral task
behavioral1
Sample
fe0f9f5aea5da4363cd468060e9dcdc8.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
fe0f9f5aea5da4363cd468060e9dcdc8.dll
Resource
win10v2004-20231215-en
General
-
Target
fe0f9f5aea5da4363cd468060e9dcdc8
-
Size
113KB
-
MD5
fe0f9f5aea5da4363cd468060e9dcdc8
-
SHA1
491b6bc206c1867461c117089216664267973228
-
SHA256
f490df78e1d95d23a97d84ab4cac052f316484647a8ebf3b56b4bba2ab4d96e6
-
SHA512
5a532237abea0cb17747dfacbc34bf8922d77d20f6a7431e34659473da5f1fde8b64b52997be0d51f7dfef5be7ddc8b127e34ec634dc987a7fc45bd647ed7c49
-
SSDEEP
3072:PAyBxDMDagB2D/G3cr5RJuSqKF2Ne+3QKJeoBmi:PZvDMDtBZ3cr5RJtse+3QKJLY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fe0f9f5aea5da4363cd468060e9dcdc8
Files
-
fe0f9f5aea5da4363cd468060e9dcdc8.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 111KB - Virtual size: 110KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 768B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ