Static task
static1
Behavioral task
behavioral1
Sample
31cb338b4b6a9c9d6f52ec80d9f57ac5.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
31cb338b4b6a9c9d6f52ec80d9f57ac5.dll
Resource
win10v2004-20231222-en
General
-
Target
31cb338b4b6a9c9d6f52ec80d9f57ac5
-
Size
95KB
-
MD5
31cb338b4b6a9c9d6f52ec80d9f57ac5
-
SHA1
63e684ece8f0fe9960ca48ce17b3afe983648f6a
-
SHA256
3e7c7d20607ba6ec23e9eb4ead8f901965eb531d8ff4c00c172755c12592b074
-
SHA512
5b94be035b05cd989c3c05b78c6c8ccf790988135a34f2855a50fa7be448e6e1b7ff18bb3960db5610f4b96fc6b4097b3d3a98e808bbcee329a38f6902213f97
-
SSDEEP
1536:x9teFLP42116hTU+hkOfxj4AvWDe3z3+wcItWYOVrSWmOygBn0rEIVN4wr9GkCqE:3tmLPrShw+hkOfNvOe3z3yDR5SWUgmlg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 31cb338b4b6a9c9d6f52ec80d9f57ac5
Files
-
31cb338b4b6a9c9d6f52ec80d9f57ac5.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 20KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 70KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE