Static task
static1
Behavioral task
behavioral1
Sample
0159696ef9569560cc2f46eb9fb05c10.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0159696ef9569560cc2f46eb9fb05c10.dll
Resource
win10v2004-20231215-en
General
-
Target
0159696ef9569560cc2f46eb9fb05c10
-
Size
1.8MB
-
MD5
0159696ef9569560cc2f46eb9fb05c10
-
SHA1
5a197d802bda39b326c4cde65b889eaa1a368595
-
SHA256
e3577c7d8b7b4f8100e3e7d62fe1962e4bbd93ccd96f6d89e1558eacdaf719ec
-
SHA512
f2f885512db3d1a4e68f0388174223c09a1156ca5a6e1245c4d92125ab1591a0e201c05a9116f9ec8f217c2faefe33d7d25092fafdb5a77de4396b017510aae0
-
SSDEEP
49152:Po/sJNMEMonM1ys4ZqfsAQERkZPY5gBGtkAEmiryEkaO5EkAU:Qs/znM1eqUQRSPY53tfCFkZOkAU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0159696ef9569560cc2f46eb9fb05c10
Files
-
0159696ef9569560cc2f46eb9fb05c10.dll windows:5 windows x86 arch:x86
baa93d47220682c04d92f7797d9224ce
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Sections
.text Size: 39KB - Virtual size: 10.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 737KB - Virtual size: 737KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024KB - Virtual size: 1024KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE