m_arrest
Static task
static1
Behavioral task
behavioral1
Sample
01be8f8d0d7a1c405940db65e274efb2.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
01be8f8d0d7a1c405940db65e274efb2.dll
Resource
win10v2004-20231215-en
General
-
Target
01be8f8d0d7a1c405940db65e274efb2
-
Size
28KB
-
MD5
01be8f8d0d7a1c405940db65e274efb2
-
SHA1
c63b08aa368bc543eb2213a752ec036b2f036126
-
SHA256
8811dfa0c502bfc1f0e55bdd4c0468202ef29d6411455e9af480950eeb4206d8
-
SHA512
627d05b3ea9519acd74df2f056022cbbe1b9576a071d090b7f8a96ee5dfc62c54d2e09bb682a5ef7026f68846bf2c62cd0a670fce072432f0be611f66c5b4a8c
-
SSDEEP
768:SWc5d4rHiII08bvsskVAXj/3FXEgwRRcA5wu:x+08bkxAXj/VSRiGwu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 01be8f8d0d7a1c405940db65e274efb2
Files
-
01be8f8d0d7a1c405940db65e274efb2.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
ds5d0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ds5d1 Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ds5d2 Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE