Static task
static1
Behavioral task
behavioral1
Sample
4a56e2e4862bbfb9aaa0909ded0783a7.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
4a56e2e4862bbfb9aaa0909ded0783a7.dll
Resource
win10v2004-20231215-en
General
-
Target
4a56e2e4862bbfb9aaa0909ded0783a7
-
Size
319KB
-
MD5
4a56e2e4862bbfb9aaa0909ded0783a7
-
SHA1
3287c43287b9dd5f9d817f1aaa354b1ebd2bb80d
-
SHA256
3de05cb9cdbef62c44fc0ed693f06046c73f207b8caa39a48d109d9e816132f4
-
SHA512
9da17db278cb06250cfaa275ff4634a957a984f4a41dc3e95d99a42937b7e8756598e2718f7eaf92d41ad8017fc9792086b2cda93cbaaf018849422f01ef2d1e
-
SSDEEP
3072:Jd3P/IOCRCB2QG0MKKj2CVNPcEbrICZ5lmvs4+0Dvl8oReA2FzFrfpJGUr/B0x2:L/IJOMKOFFZ5s1k3p04Nqn5dVmzoXF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4a56e2e4862bbfb9aaa0909ded0783a7
Files
-
4a56e2e4862bbfb9aaa0909ded0783a7.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UBO0 Size: 192KB - Virtual size: 192KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UBO1 Size: 107KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 19KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE