Static task
static1
Behavioral task
behavioral1
Sample
6e2d77d0366e56e13d1fa4d4c9c98842.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
6e2d77d0366e56e13d1fa4d4c9c98842.dll
Resource
win10v2004-20231215-en
General
-
Target
6e2d77d0366e56e13d1fa4d4c9c98842
-
Size
109KB
-
MD5
6e2d77d0366e56e13d1fa4d4c9c98842
-
SHA1
b8d3db85926618106e5cc9eff7a0dc7200d17b8d
-
SHA256
39e702aaa81dfdd954a8f005be1a890151ee55713575d773bbd947c9d08e47dc
-
SHA512
19448150b7255253fee84da2567349164fe6105d4d1453c15b1e929437f7ef71346760df0a7a5739deac773a24cf6bd351e3c5f60c3352bc1d13ff6da4f6b038
-
SSDEEP
3072:6R/Uj/iBrYnQ17KD9LMT/cHYM5juGRzQ772bluU7:6Cip7MLMT/c/Qn76Bl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6e2d77d0366e56e13d1fa4d4c9c98842
Files
-
6e2d77d0366e56e13d1fa4d4c9c98842.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.text Size: 524KB - Virtual size: 1.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE