Static task
static1
Behavioral task
behavioral1
Sample
6e4ec6a4d67cfd2a5856bd06717e3eff.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
6e4ec6a4d67cfd2a5856bd06717e3eff.dll
Resource
win10v2004-20231215-en
General
-
Target
6e4ec6a4d67cfd2a5856bd06717e3eff
-
Size
118KB
-
MD5
6e4ec6a4d67cfd2a5856bd06717e3eff
-
SHA1
5b7dae6548831202f47e42f6bfab54599c0eead4
-
SHA256
e9fd98be9eebf13cb2a3403a58c442daa5b5b410d115bed7be06999e0f0fe865
-
SHA512
7e0c2a2162620ba30e510593c4e82f409b08ff6773b9d805a1926d5c81cea4d2a995661f64e1b08191628c5ff47cfb297800412dfffd3aa2a926a2ad77ae04b3
-
SSDEEP
1536:UL3fUaQwVHFx0OFa0EIm+eUNOs50QsCO9ZniCBhvUnFT19hhc1/JspVbxWq1wz5T:UL8nFDIm+ePC34UZ7M1/GwdT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6e4ec6a4d67cfd2a5856bd06717e3eff
Files
-
6e4ec6a4d67cfd2a5856bd06717e3eff.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 25KB - Virtual size: 260KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 5KB - Virtual size: 344KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 63KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE