Static task
static1
Behavioral task
behavioral1
Sample
4924946c3817a46354a14adb9025587a.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4924946c3817a46354a14adb9025587a.dll
Resource
win10v2004-20231222-en
General
-
Target
4924946c3817a46354a14adb9025587a
-
Size
153KB
-
MD5
4924946c3817a46354a14adb9025587a
-
SHA1
aede341ef81e1b362cebc31fccab0ee32672a744
-
SHA256
02f448872d40d4f3d4234910ff61ccc776acd4fac23c42913aead2524cdd153e
-
SHA512
59872b6a12458453ca1b3676d0a202b46122fedd6b2d8a50005d52b922cc7c95d2494f47164b631f2906be45f7eb0a7820d3255125585bb010c06bb3da448a96
-
SSDEEP
3072:qfnEVB8mPjprteGMYH7+ZpHqA+XLMzp0/y3QxZH4SYauODpsnaRQeeaQeeFQeesC:qfCVL6p0/7ZHaERQeeaQeeFQeesQeemm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4924946c3817a46354a14adb9025587a
Files
-
4924946c3817a46354a14adb9025587a.dll windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 114KB - Virtual size: 113KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 1000KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 436B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ