Static task
static1
Behavioral task
behavioral1
Sample
1f493dd9be6824d852334979767be052.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1f493dd9be6824d852334979767be052.dll
Resource
win10v2004-20231215-en
General
-
Target
1f493dd9be6824d852334979767be052
-
Size
25KB
-
MD5
1f493dd9be6824d852334979767be052
-
SHA1
a4d8fed9b3b9448372ab80137976693b0e082ff0
-
SHA256
8e96b27782ed4e58fb5f416f7a19803d543524ef6515f5636db19072c86d2daa
-
SHA512
83ddb67bdc9ff6bb37137da7e729fca1bbf570549505e4a02d4ff7da2947e9b390494d0c1e65ad013321db4e8b0da762687a19aa023fe5974f29d6b49dc834f6
-
SSDEEP
768:BPXE2ACWhjH60dZRwHVFjL7ykTDB+tMkgY:ZzWxH6awnHekT9tY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1f493dd9be6824d852334979767be052
Files
-
1f493dd9be6824d852334979767be052.dll windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 1024B - Virtual size: 904B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 9KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 1024B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ