Static task
static1
Behavioral task
behavioral1
Sample
0828f794ccc9952496cb7508689ea1fc.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
0828f794ccc9952496cb7508689ea1fc.dll
Resource
win10v2004-20231215-en
General
-
Target
0828f794ccc9952496cb7508689ea1fc
-
Size
2KB
-
MD5
0828f794ccc9952496cb7508689ea1fc
-
SHA1
12f4facaf42140e10ba2ef038f32f965d7f9f46d
-
SHA256
e417a7b22eef5b2b899fd019175928fbd3d92c00dae5865ada6dd5e61ce9eb7b
-
SHA512
473c4e2bf19ba3c40f4e188393bda00c109e248ca850da94ecd477deeff7b558ba3d2cc2418e9af426913494b009eff3ef526d7263f654c07ead696a90b994c2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0828f794ccc9952496cb7508689ea1fc
Files
-
0828f794ccc9952496cb7508689ea1fc.dll windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 16KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 28KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 8KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
_BOX_ Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE