Static task
static1
Behavioral task
behavioral1
Sample
76ef932dcdf3be30e5414ca1f6fbd7cd.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
76ef932dcdf3be30e5414ca1f6fbd7cd.dll
Resource
win10v2004-20231215-en
General
-
Target
76ef932dcdf3be30e5414ca1f6fbd7cd
-
Size
407KB
-
MD5
76ef932dcdf3be30e5414ca1f6fbd7cd
-
SHA1
00f371db4b465f68ec806d40df5cf79cf6664346
-
SHA256
5900c04a8f29cb9bcd238ddf208266b893d505d676f3b9b275c112228c636d6b
-
SHA512
97276cef9911cf53e5737b73e18731953e303f890e045ef7270ce458280fe22b42da15d0ae3b04a36675027d01ace89221c35a8325222f448bf1f98df4eb4800
-
SSDEEP
12288:BGUKuCmhDKNfVvIGs5pmCYltOcqFsJWZ90xsItaR:a5VVvEO9JW4ftaR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 76ef932dcdf3be30e5414ca1f6fbd7cd
Files
-
76ef932dcdf3be30e5414ca1f6fbd7cd.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 389KB - Virtual size: 1.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 14KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE