Static task
static1
Behavioral task
behavioral1
Sample
67deba191fd16ff50028898e85a357aa.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
67deba191fd16ff50028898e85a357aa.dll
Resource
win10v2004-20231215-en
General
-
Target
67deba191fd16ff50028898e85a357aa
-
Size
23KB
-
MD5
67deba191fd16ff50028898e85a357aa
-
SHA1
19c32ff660ee89964d228cf9dffbb07d082a7811
-
SHA256
55a513fa238398ac73e4a477ce77d71a34fa815adcf57fb8b82f3bb1d2ea8ffb
-
SHA512
5b23db5f84958a4250175a2461f5921d4552423df0f0e620e4a200d1779055f1e97c36938b6cb513f69831241e0f6a446f6c1bd7988e80f267a63fa29d328832
-
SSDEEP
384:5j9tP4T/tqNDvyQaqLuRwGp3fS14f813QgwuMLGpKuUqBNc:hD4T/tqNDqQ78pvq4f8YuMqbz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 67deba191fd16ff50028898e85a357aa
Files
-
67deba191fd16ff50028898e85a357aa.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 9KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 430B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 100B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 664B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ