Static task
static1
Behavioral task
behavioral1
Sample
03152fdf4ba25cbcfd72c6ec1cafa82d.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
03152fdf4ba25cbcfd72c6ec1cafa82d.dll
Resource
win10v2004-20231222-en
General
-
Target
03152fdf4ba25cbcfd72c6ec1cafa82d
-
Size
32KB
-
MD5
03152fdf4ba25cbcfd72c6ec1cafa82d
-
SHA1
8430778c2ddf3de6798870cbbaffc9928c77951b
-
SHA256
1a4ad166a20372075bb1ee5a791d0e13d108f81eeb2596c3fcb0e55f5e65cdfd
-
SHA512
6dc2a6b51a23c5bdbcb536b11f381e1fa646a0b5067fe683229c9014e4ac8498899daef948287eedc6b2e2fb4b2bf54f4b8c353b87566937402d17f8472539f4
-
SSDEEP
768:qs/ZRmSb3T4jf73PBcCqx/557rFv4b2+O+izyzQ0MojBNcT:thIo3QPBchN+izyz+ojBNcT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 03152fdf4ba25cbcfd72c6ec1cafa82d
Files
-
03152fdf4ba25cbcfd72c6ec1cafa82d.dll windows:4 windows x86 arch:x86
87bed5a7cba00c7e1f4015f1bdae2183
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
LoadLibraryA
GetProcAddress
Sections
.text Size: 31KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 28KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ