DllEntryPoint
Static task
static1
Behavioral task
behavioral1
Sample
752b3ae389cada4006b846194d0b02ce.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
752b3ae389cada4006b846194d0b02ce.dll
Resource
win10v2004-20231222-en
General
-
Target
752b3ae389cada4006b846194d0b02ce
-
Size
547KB
-
MD5
752b3ae389cada4006b846194d0b02ce
-
SHA1
28280b1b13e142b60502e71f2fbd662cf744bd8a
-
SHA256
e34baa329aa010ed9eda4b249a8872357fdc8a937838d4c1c9eeb6896f887223
-
SHA512
7503c598465aea261a537ded51ae98cd8ce0495d3c0c39eb932e01e3db6b47191a0e814a306afd4732191e1f6fcbcc5db259b64d0e013c8050a69286db70e677
-
SSDEEP
12288:vgLTR11ikfa2ZohW2bW/mscfr02Yn589cUzo2l9LVXBZrlODz:vycUZoh3bW+rQ2Y585o6NQ3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 752b3ae389cada4006b846194d0b02ce
Files
-
752b3ae389cada4006b846194d0b02ce.dll windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 2.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.Kasha Size: 540KB - Virtual size: 544KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE