Static task
static1
Behavioral task
behavioral1
Sample
6d251f093a76e097381941e136145197.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
6d251f093a76e097381941e136145197.dll
Resource
win10v2004-20231215-en
General
-
Target
6d251f093a76e097381941e136145197
-
Size
61KB
-
MD5
6d251f093a76e097381941e136145197
-
SHA1
11bdb07b5615d81dbd5b7ee1c614785d847794ad
-
SHA256
1e0e8028d46305a158ffd74808043ef66d1678a6187c1905850a4152bfc99152
-
SHA512
94e2c577e0fcb3c2dd40942ab407dce3ae2a15c18cfd2d4ecd7d556ac59a9c1b0597853030d993b2177fd49f733d1b796f090c8055941b887521c2c6dabfed96
-
SSDEEP
1536:qd/mgBcMJbsgjazn2yT6S3gfxk0ULVoD+FYPHE:BgBD69z4xkRLek
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6d251f093a76e097381941e136145197
Files
-
6d251f093a76e097381941e136145197.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
CODE Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 37KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 1KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE