Static task
static1
Behavioral task
behavioral1
Sample
6e4a2a1face9f6cd610feee04e0fec28.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
6e4a2a1face9f6cd610feee04e0fec28.dll
Resource
win10v2004-20231215-en
General
-
Target
6e4a2a1face9f6cd610feee04e0fec28
-
Size
155KB
-
MD5
6e4a2a1face9f6cd610feee04e0fec28
-
SHA1
3fb36dcd8bb73d0e95bc2fe0c5c7d597fc951c26
-
SHA256
dd82c32dede2eb41632d41f9c6dde99c55d3c48a618d365e1cd02f780f8744a5
-
SHA512
21de25b336fd4cb5f586ccf257dc12d8da6bc1c93c2a603ca14e6113822c3e990f187454dea1919f961ebdf01d52f94e52bf4ef900a4de6dc0ca0997c6254611
-
SSDEEP
3072:t6k0m0NDEIFXrQf4Pu8zazRLTrftm4VhDylTejWVcz7uMFgVGsn:t10TR81LtmsSijJ7BFgVGsn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6e4a2a1face9f6cd610feee04e0fec28
Files
-
6e4a2a1face9f6cd610feee04e0fec28.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 180KB - Virtual size: 177KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 20KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 812KB - Virtual size: 820KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 16KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ