StartDaemon
Static task
static1
Behavioral task
behavioral1
Sample
372382a0a81c22d81444fb3d8daedec0.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
372382a0a81c22d81444fb3d8daedec0.dll
Resource
win10v2004-20231215-en
General
-
Target
372382a0a81c22d81444fb3d8daedec0
-
Size
6KB
-
MD5
372382a0a81c22d81444fb3d8daedec0
-
SHA1
786dfcf00412397e7be206d97928aeeef88863be
-
SHA256
875f01ad3c2c0fd4c724f81ae4c739061de96926bab57f8ddd054ae706cbb385
-
SHA512
6947dd2134f37ed3f7379fbcc420ab84226dc6d9a44060d6a1696554ebd72ebc378a398d4f23ea393165045989c350124c3c274fb6c2be02a529c505d8a39173
-
SSDEEP
192:I7l9h7DnSVAiHo6oOOpjJ74DWZ/sPHnqFhkgUw90:k9h7DnSRHouSFeWZ/sPHnqFur
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 372382a0a81c22d81444fb3d8daedec0
Files
-
372382a0a81c22d81444fb3d8daedec0.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
.Upack Size: - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE