Static task
static1
Behavioral task
behavioral1
Sample
056cece7668b7b42af585ff230da5faf.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
056cece7668b7b42af585ff230da5faf.dll
Resource
win10v2004-20231215-en
General
-
Target
056cece7668b7b42af585ff230da5faf
-
Size
17KB
-
MD5
056cece7668b7b42af585ff230da5faf
-
SHA1
1c883cdca778e70dc70cfba1342d61b3b9e0da0e
-
SHA256
b2bb89e9deb79387b85dfe59bc1efbb7efab498a6a4358a60f328c7e39052cd8
-
SHA512
add50d53eb303a21be23a5ffa285aa163287182db791e860501e46a0e0603ec181107be3f8528ea8beb728da0ae412637749576423843d5280cbfb40b0efcdb7
-
SSDEEP
384:hIIjsI03kjwBWoBZt143QAdOFeTy4alpymHxwCOG7M4Dw7nzfVbgtKriybGCH:hIAmkjwAoBh43IeG77xwCOG7fDEnetwv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 056cece7668b7b42af585ff230da5faf
Files
-
056cece7668b7b42af585ff230da5faf.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.Upack Size: - Virtual size: 80KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE