Static task
static1
Behavioral task
behavioral1
Sample
03c79008979508581044737e387c9007.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
03c79008979508581044737e387c9007.dll
Resource
win10v2004-20231215-en
General
-
Target
03c79008979508581044737e387c9007
-
Size
218KB
-
MD5
03c79008979508581044737e387c9007
-
SHA1
578c4a4c729392b43fc4def79b2c7ab18805972d
-
SHA256
d9266243d70424ac3777ea6ecf4ed1f81356d332614852916be6aca278b8ae56
-
SHA512
b8522b58246033b3d803a6ad9034faada2dacd744eb4e87865d0a2f3cb1d1f935f9365e410a5dcb8badc4949ef500d7ce6d8480fbb914fa9dd635245d6935218
-
SSDEEP
3072:U3v0qJZyl4HhvtVGx7VsdfcKbeZQiedDtDRRCCP+igkOXXmzHEiyL95Rj8L1:U3vyuBVIx7/Ci0DECP+fmzHEiyLH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 03c79008979508581044737e387c9007
Files
-
03c79008979508581044737e387c9007.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 193KB - Virtual size: 192KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 2KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ