Static task
static1
Behavioral task
behavioral1
Sample
471e4282ad3dd132f70520abb5036807.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
471e4282ad3dd132f70520abb5036807.dll
Resource
win10v2004-20231215-en
General
-
Target
471e4282ad3dd132f70520abb5036807
-
Size
46KB
-
MD5
471e4282ad3dd132f70520abb5036807
-
SHA1
da4fece11ff00a943958380035d0a6da53ac139b
-
SHA256
84bc0f12dc0b7107d8e18c9cdc3a7a9256ff2afb81d94277eccb00e85c7b9b0f
-
SHA512
39cf117e583ca3db1f3eef7b26c55230552fcbb07658f4226a3a0a7265d0e4e0bd67cdaa3cacc34d48555b443f33cd6f0eb90a4d179b7367ddfb394806a3ba03
-
SSDEEP
768:KLOlawgBaokv0mroJm+ucYeotNi0zyq311lZyegOi0J3lgumYL:aOlawmaokbUo+BY1tkUyq31dXL3B
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 471e4282ad3dd132f70520abb5036807
Files
-
471e4282ad3dd132f70520abb5036807.dll windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 110KB - Virtual size: 110KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 252KB - Virtual size: 252KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ