Static task
static1
Behavioral task
behavioral1
Sample
11b9dcc57836be6912c236864b268a92.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
11b9dcc57836be6912c236864b268a92.dll
Resource
win10v2004-20231215-en
General
-
Target
11b9dcc57836be6912c236864b268a92
-
Size
87KB
-
MD5
11b9dcc57836be6912c236864b268a92
-
SHA1
347f00c06a61a8134212a0b7e2135c471830b54a
-
SHA256
bd1768456e3b1dcfd4cbaa269993d9c5d7cc6f49cd90a1454e1f8e40ca992bd4
-
SHA512
a618555d15d54d035af8d2fa54cee9a9dc2b74f86d8fa5c9ba27a703a7a2ee8bc5ea7bff6b59a794397b1c3214092da5814453f401a4baa6d7fdfcacf8d49078
-
SSDEEP
1536:5JfW7L6PCAyX5V2bg7s/EPYsL934bdj4ctanSnee91tIrbzoERukP7yBNWqOpHNu:5Cb407scgs5AztanSnee9ErbABNWqOF4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 11b9dcc57836be6912c236864b268a92
Files
-
11b9dcc57836be6912c236864b268a92.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 86KB - Virtual size: 86KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ