Static task
static1
Behavioral task
behavioral1
Sample
5312d378a1d146d357ddbbb374dbc4d0.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
5312d378a1d146d357ddbbb374dbc4d0.dll
Resource
win10v2004-20231215-en
General
-
Target
5312d378a1d146d357ddbbb374dbc4d0
-
Size
169KB
-
MD5
5312d378a1d146d357ddbbb374dbc4d0
-
SHA1
eb68ec08c172c44e75cf1b823cbbe679d2737b5f
-
SHA256
3ae9e962eeb1d40faaabe8c0c99eee011f351518a525f7be396b4f0bffd0e07d
-
SHA512
2e89bf5af450b4cda36e243d59f8764ecbd3367b7b679eb73c96a88601c2c9ced1652ae8e3d7c5c8bd48848eb6a19dac6fc1ebc0b3f81125e201881efe49b64c
-
SSDEEP
3072:Y0GBUwvGS7KD21q455j1jg0BvZLZSiu2E4cI52JsQLy33k65qTJPUzdUsTQ4Jf/v:RGBQS7Zq4jj1jnLZEIwSnkekJMzzTQ4F
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5312d378a1d146d357ddbbb374dbc4d0
Files
-
5312d378a1d146d357ddbbb374dbc4d0.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 65KB - Virtual size: 66KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ