Static task
static1
Behavioral task
behavioral1
Sample
3af6b4250bf94a56e39d0d9123db1c7b.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
3af6b4250bf94a56e39d0d9123db1c7b.dll
Resource
win10v2004-20231222-en
General
-
Target
3af6b4250bf94a56e39d0d9123db1c7b
-
Size
49KB
-
MD5
3af6b4250bf94a56e39d0d9123db1c7b
-
SHA1
b5a54cb3f3b5bd93d6f0426546f1f7af7ef69c8c
-
SHA256
ca868b3530179e6fe6ed466dde61eaf48b63a35513279ae59c21d800e9237bbe
-
SHA512
7578db74d45c860cc00c5588dcce9ffefcb8d818d590a6cf3fe479f6ebcde02843403e03040af9b187714e23db66e18f7f984621e72344a5bb7d3cead505385d
-
SSDEEP
768:v35z8eJeTUdCYqON7PA/qu3uiqKHj2lZpP6NNlavEvc4LHVhbdSyTvr/3+s/fRIm:vvAMC1/qu3P8afzvTrTvrvlm2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3af6b4250bf94a56e39d0d9123db1c7b
Files
-
3af6b4250bf94a56e39d0d9123db1c7b.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 33KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE