Static task
static1
Behavioral task
behavioral1
Sample
026c141ebeb5537d5c3a73157ad45d44.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
026c141ebeb5537d5c3a73157ad45d44.dll
Resource
win10v2004-20231215-en
General
-
Target
026c141ebeb5537d5c3a73157ad45d44
-
Size
208KB
-
MD5
026c141ebeb5537d5c3a73157ad45d44
-
SHA1
2bf544650870557123aca8483485211fd6eb3240
-
SHA256
4290560c6d3030e60053d25c539c7137fd5382b39fe1c06af0c37370eaa6036d
-
SHA512
a8c47457cd1afb8a1cebdff1bc1fa9b0f5f635e6025e1a9135186253c9b3eca61e6c23bae089a37a9163834f566b5ed497a69bc57b97447888beedb7e35c83f8
-
SSDEEP
3072:ooRQsgsLyOKLLBWKCjfcY+9tqlZoykTU19DBNl8d7cr/TnCwIbFH2QRzID91:ooRQsW/XUKlXqLoykTUDlo7arnCw2WQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 026c141ebeb5537d5c3a73157ad45d44
Files
-
026c141ebeb5537d5c3a73157ad45d44.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 183KB - Virtual size: 183KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 2KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ