Static task
static1
Behavioral task
behavioral1
Sample
0d5f10459049f15af53e9c179e3c536a.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0d5f10459049f15af53e9c179e3c536a.dll
Resource
win10v2004-20231215-en
General
-
Target
0d5f10459049f15af53e9c179e3c536a
-
Size
96KB
-
MD5
0d5f10459049f15af53e9c179e3c536a
-
SHA1
75c2150a763aaed4f85ea1f6bad2117f641a8b79
-
SHA256
e296fa2d73a286a89e2d078904dfb1fa1682b7b7cf207462686db77591310b93
-
SHA512
38ebf43c953a83d09965354a192a0a7c6c88645c27ee9603e1f66f384b6026068c0ffef31fe1ae804c5aca0b73a4a88047c63f748a510e9753d7fd26ba32b6b7
-
SSDEEP
1536:4OKjW4W2nd8yuF4yS6MPI8jHFv9FlF9BFfYRKYqgnqR:dwJ1nd8yuF4yII8jHL/F9BRqKY5na
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0d5f10459049f15af53e9c179e3c536a
Files
-
0d5f10459049f15af53e9c179e3c536a.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 40KB - Virtual size: 38KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 502B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 390B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ