Static task
static1
Behavioral task
behavioral1
Sample
5ba0ac61960e8dd096f91c875d990973.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
5ba0ac61960e8dd096f91c875d990973.dll
Resource
win10v2004-20231215-en
General
-
Target
5ba0ac61960e8dd096f91c875d990973
-
Size
42KB
-
MD5
5ba0ac61960e8dd096f91c875d990973
-
SHA1
b25a2a5122e48163ab628d975c6afd09b6609dbc
-
SHA256
e47086919b8750331132c97eb1f1fd1d0ff04043f2b50028460121f2f5560903
-
SHA512
b4231c707acc16ab67206807398bf9f4f3f352a86b932ebb3811eef3296fb1c48935a48a380935b705a46bb1131da32bd31861595aeaabf88079bd4f4ff7db6f
-
SSDEEP
768:FQkPTrZzZYqNoZiznXwZ2n6r6NhfNpYdDKuaoXlvGbFaASd69Eo6gc:ZrrbZN7znXYCzp+lOB9D+r
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5ba0ac61960e8dd096f91c875d990973
Files
-
5ba0ac61960e8dd096f91c875d990973.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.code Size: 42KB - Virtual size: 71KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 760B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 622B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ