Static task
static1
Behavioral task
behavioral1
Sample
56a80c3ee55b192eeee78a8a89c71a24.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
56a80c3ee55b192eeee78a8a89c71a24.dll
Resource
win10v2004-20231215-en
General
-
Target
56a80c3ee55b192eeee78a8a89c71a24
-
Size
331KB
-
MD5
56a80c3ee55b192eeee78a8a89c71a24
-
SHA1
b5204bcff7d996736b2648c7cca34d9f6500d96c
-
SHA256
10be92097b3c3cd7898b89624c4120b4ff9f8ff590ff257fee77623eece82461
-
SHA512
69b34b5f043c5b0d4ddeac26a3a4d1c7ebc284201b6f9514dbf1e4bf4dd5a41b786b29cdfb84b04aa346cfd3021bec7164fa82aee34ae09e2c29a966f8dbae19
-
SSDEEP
3072:aRP04q6ttR2uMagkcalVFGW35MWb5KAgNCjQKLD2acwIDTv+:+04q6tbpMagZaFb+Wb5mU167e
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 56a80c3ee55b192eeee78a8a89c71a24
Files
-
56a80c3ee55b192eeee78a8a89c71a24.dll windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 136KB - Virtual size: 135KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 157KB - Virtual size: 165KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 848B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ