Start
Static task
static1
Behavioral task
behavioral1
Sample
04e928ad3691e6451bb0c503ab139df8.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
04e928ad3691e6451bb0c503ab139df8.dll
Resource
win10v2004-20231222-en
General
-
Target
04e928ad3691e6451bb0c503ab139df8
-
Size
211KB
-
MD5
04e928ad3691e6451bb0c503ab139df8
-
SHA1
5611156a56b430a9babf0084785b03aecfceb70c
-
SHA256
0df5f9884c89ae4487e2b42cff6ed89660f0fa26f0c9bbf11aa49bdbffc945a2
-
SHA512
c6eec6c95b7d476e4630112dca12f0480998705f639af7d6e607fd8b389540476ee7730ddae4c4b5e1f20445714f67c8e02fde3c2636295ab0bb77635abfdca3
-
SSDEEP
192:lQd4++JgNPY1XKsBadWDrd1tUG/IFkNF9G/OTrH2oYXloenJdKDY6oog2kkgUwuu:l84+cgNw1PagXd1bgFkN/GfXyqKMn27M
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 04e928ad3691e6451bb0c503ab139df8
Files
-
04e928ad3691e6451bb0c503ab139df8.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
.Upack Size: - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE