Static task
static1
Behavioral task
behavioral1
Sample
069ca4be4f832ee0b9109078b12a1cdd.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
069ca4be4f832ee0b9109078b12a1cdd.dll
Resource
win10v2004-20231215-en
General
-
Target
069ca4be4f832ee0b9109078b12a1cdd
-
Size
46KB
-
MD5
069ca4be4f832ee0b9109078b12a1cdd
-
SHA1
82e68832e54fa1fc9337360e688f3ba1c079abbc
-
SHA256
e0efbe400558b1df712df10e425ff4268ed3a2d143bb5f7397115477ea23795b
-
SHA512
48187f9af49ce006fcc283aad4bffc23e3c76ba5e214641ef95a59868fa141f72d26a23cbe17fa425c7c7c23e4d1a508fe0909758b40ba73997b74dac465a3c9
-
SSDEEP
384:0JIDFq+fzR9VrgfTyWVBSmQaCxuJrf063ALOYW8m+TLvvUo3LnvrfKHcqC:eIxq+fzhraSmnZsN9Nqo3Lnzocq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 069ca4be4f832ee0b9109078b12a1cdd
Files
-
069ca4be4f832ee0b9109078b12a1cdd.dll windows:5 windows x86 arch:x86
b4e707e9acecd405bdd67065419b8250
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
ntoskrnl.exe
ExAllocatePool
MmUnmapLockedPages
hal
KfLowerIrql
Sections
.text Size: 45KB - Virtual size: 45KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 92B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ