Static task
static1
Behavioral task
behavioral1
Sample
70e196d12ea0b9b3b87294232995928c.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
70e196d12ea0b9b3b87294232995928c.dll
Resource
win10v2004-20231215-en
General
-
Target
70e196d12ea0b9b3b87294232995928c
-
Size
183KB
-
MD5
70e196d12ea0b9b3b87294232995928c
-
SHA1
2980635ae20b89d743c4c1a4963f19c83e0b21e6
-
SHA256
e21d9e3ff30327b2d2c9f32242a738ddc6c0245b4b285452857f9a372ef29999
-
SHA512
9b5f1621d280e7e60da13729bf9673fc59a9652eb3a6e56e34ccc468e56bb27bba65b8659ba3c06721191184f154bca35bda5f2e6d8771ab0ec3d905aa3c597b
-
SSDEEP
3072:Wl7//ekguSHvZR4HSvzf5xz/STk8JpPxD2l/bSKfFz3Pp9x54gcXSWvKiE4Q:ICRRiYzfbzRajaSMlhtwSO9Q
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 70e196d12ea0b9b3b87294232995928c
Files
-
70e196d12ea0b9b3b87294232995928c.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 520KB - Virtual size: 520KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 66KB - Virtual size: 65KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 18KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 26KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ