Static task
static1
Behavioral task
behavioral1
Sample
35c7d0ce3e9b3772d8a306f977653049.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
35c7d0ce3e9b3772d8a306f977653049.dll
Resource
win10v2004-20231215-en
General
-
Target
35c7d0ce3e9b3772d8a306f977653049
-
Size
40KB
-
MD5
35c7d0ce3e9b3772d8a306f977653049
-
SHA1
1232279f8379b60e09158b97292de4a876340522
-
SHA256
e94cff222097b5945e3022b3452e86cdaaa3b257248aa7fb4909bb01ee0dab32
-
SHA512
2e5f2848a0136c438d773fb02296b9d327b4602a8b6cd42fcfd4ee9e3eaaaa7013c6dd2f4b3617221919f44d1bd8b5117b6bf81079ccbce6a945a436c9eb9b92
-
SSDEEP
768:7MimwE/IDvx3zc7E3DEB9x7DyR5y8x7V1VNiqc9l77JuODhEO:pyId1UMjRREf9d7JuOqO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 35c7d0ce3e9b3772d8a306f977653049
Files
-
35c7d0ce3e9b3772d8a306f977653049.dll windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 170KB - Virtual size: 170KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 41KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ