Static task
static1
Behavioral task
behavioral1
Sample
1b01174416ac2bd1317623f5ed928568.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1b01174416ac2bd1317623f5ed928568.dll
Resource
win10v2004-20231222-en
General
-
Target
1b01174416ac2bd1317623f5ed928568
-
Size
78KB
-
MD5
1b01174416ac2bd1317623f5ed928568
-
SHA1
a5bd6649b5f0d9eb4aa41447d2bfde2347ec160f
-
SHA256
e1d8c503950a461cd50824d59fbf9575d98a00a2816758c547b9838f877e2357
-
SHA512
c8c90a8fce90756bef0001b8624332408bb6d6b61bb3c3bde4b46e484db45d5da3884582e6b8ae1eb6a200d0e9fe786e57bd2574954216c4298b46361f6e22bc
-
SSDEEP
1536:JX/DhILGDhzVA84p3RyFhXMMAEPbpz/s5c84lOFeInd/uX77xN4FqxmE:JX/VvZy8cwFhnAEzp/KFN/uX8FqxmE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1b01174416ac2bd1317623f5ed928568
Files
-
1b01174416ac2bd1317623f5ed928568.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 107KB - Virtual size: 240KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 114KB - Virtual size: 652KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 116KB - Virtual size: 424KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 10KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pklav Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE