Static task
static1
Behavioral task
behavioral1
Sample
196629d0029d0af26d190b60c75aef08.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
196629d0029d0af26d190b60c75aef08.dll
Resource
win10v2004-20231215-en
General
-
Target
196629d0029d0af26d190b60c75aef08
-
Size
9KB
-
MD5
196629d0029d0af26d190b60c75aef08
-
SHA1
0cd0361ea90bc14764203171064dcbaf1b050327
-
SHA256
edc5724e8987368623225f0c48045f8b9d20a0a36dd1155798108cf8f3e0de0e
-
SHA512
c324f6ba42db82d331950d82decd0697fa2c7df3ecf0b00a149970c4298b147de32e088e724f96008a67e87f29ed0310cd44e15f973257d5ad679ed6fcbd9706
-
SSDEEP
192:NEQ4G7Ci+qyyksJk1AlTKAmVmH2wzJrGHH:NE5G7nfyy7kHLmVxoH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 196629d0029d0af26d190b60c75aef08
Files
-
196629d0029d0af26d190b60c75aef08.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 688B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ