Static task
static1
Behavioral task
behavioral1
Sample
00b835dabaf2ae20f68c84e1a79e4d2a.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
00b835dabaf2ae20f68c84e1a79e4d2a.dll
Resource
win10v2004-20231215-en
General
-
Target
00b835dabaf2ae20f68c84e1a79e4d2a
-
Size
13KB
-
MD5
00b835dabaf2ae20f68c84e1a79e4d2a
-
SHA1
510d4b7360be08e4ed5de40b7db8d9a3bf9a3506
-
SHA256
d69008e616786657a63c70a3b45c7ed5ff494a5ab71658a22b9dc76e18d3f425
-
SHA512
b04c63d0118071d2d92b0052478832aef044890337d5fe50d0a4201568d3aa1cbfde84d2b7ffa9057f37803a8433855e0e1ddbbb2c9faa60af335691295dfdbb
-
SSDEEP
192:ZdHW0gb6pBC6a01VCZ4SLY9FDqU75ngt4CDb8PnCk6vL8kC4xFT5l3ZckfE3tV6U:X2FbGB1W4OIfVngiVAxF7ZcksiRDtti
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 00b835dabaf2ae20f68c84e1a79e4d2a
Files
-
00b835dabaf2ae20f68c84e1a79e4d2a.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.Upack Size: - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE