_wb_get_location@4
Static task
static1
Behavioral task
behavioral1
Sample
022712d3cc6eef7c763b370149dbe79f.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
022712d3cc6eef7c763b370149dbe79f.dll
Resource
win10v2004-20231215-en
General
-
Target
022712d3cc6eef7c763b370149dbe79f
-
Size
43KB
-
MD5
022712d3cc6eef7c763b370149dbe79f
-
SHA1
deb187ac459ca38c7fd9d0f5489bd770f63acbc7
-
SHA256
e8b861a343af311c1d2d5d53f6678a572c5f9570e14cf85bc6b51569c3cc4d7b
-
SHA512
22fec0516873efb12cee15c55f168dbdaa7e288ba503399b35dc3de931ee9aa4f9392cf192411b08d1e2875253c8235c18f1de77664ec8ec18297660feade521
-
SSDEEP
768:XcsNPWf7zO2JWh3rz10K5rPV4p7ODbRAQwWyuf:XcsNPfhrp0crJPSky
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 022712d3cc6eef7c763b370149dbe79f
Files
-
022712d3cc6eef7c763b370149dbe79f.dll windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
.text Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ