Static task
static1
Behavioral task
behavioral1
Sample
0bf15e94b78ab428584d3bd6a7d73d1e.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
0bf15e94b78ab428584d3bd6a7d73d1e.dll
Resource
win10v2004-20231222-en
General
-
Target
0bf15e94b78ab428584d3bd6a7d73d1e
-
Size
208KB
-
MD5
0bf15e94b78ab428584d3bd6a7d73d1e
-
SHA1
663b8e3f294ae5c9aee61cfab1accdde8249f05b
-
SHA256
72842bf465c95d35f24f5585d11bf762cee2f563044484d886e4636909144e50
-
SHA512
2c50acc95965c60b94dde4e7de3262e958f2fa73c54a0cc9d0dae6b333a0aaf70b84ac91173ed25e3f4c881660b7eb1cb1276ff6bdceb4529b88f019e9b2d33b
-
SSDEEP
1536:UGAtjAo4a759YufO90izC0uEAAUkTbvP9mci334joTILTsLKwjjcqOeYkn:UBkaO90izzwobX9a4joToTQKOCeYkn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0bf15e94b78ab428584d3bd6a7d73d1e
Files
-
0bf15e94b78ab428584d3bd6a7d73d1e.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 196KB - Virtual size: 195KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 944B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ