Static task
static1
Behavioral task
behavioral1
Sample
00591a2428bc1c9c127de0ac3a951602.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
00591a2428bc1c9c127de0ac3a951602.dll
Resource
win10v2004-20231222-en
General
-
Target
00591a2428bc1c9c127de0ac3a951602
-
Size
31KB
-
MD5
00591a2428bc1c9c127de0ac3a951602
-
SHA1
515bc4247c9b9af73f9a13a9c9f9764d5cdb941d
-
SHA256
03df2d3b41f5e45d2ac6df1bb9b0ca9067804f9f02fdca7a10dae8d04652a3ae
-
SHA512
e24ca5588ac0b209da19796563193d73d0cf584e160444888d270eec9df55875520de04ed4921a4827108f63cbf5839dad9eb8cdb0bfa8c53f569517f252c443
-
SSDEEP
768:k5LjKELNNIg2seqjOlKVjKmq3OxRP2e7WPDqy8:gmEL/ItLqOYKJODP2yW7/8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 00591a2428bc1c9c127de0ac3a951602
Files
-
00591a2428bc1c9c127de0ac3a951602.dll windows:4 windows x86 arch:x86
bf3132895723e15c3382249685e23069
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
VirtualProtect
GetProcAddress
LoadLibraryA
VirtualAlloc
VirtualFree
Sections
.text Size: 22KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 398B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 212B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
attach Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE