Static task
static1
Behavioral task
behavioral1
Sample
03efe7c08aec761213077dcd18253edf.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
03efe7c08aec761213077dcd18253edf.dll
Resource
win10v2004-20231215-en
General
-
Target
03efe7c08aec761213077dcd18253edf
-
Size
118KB
-
MD5
03efe7c08aec761213077dcd18253edf
-
SHA1
dfdd3da3ad9aae4ed45d3a0fa9b1f2db78ea4001
-
SHA256
6e1a8320ee4889a7b786b1cc288007060c2ccd6bdc980ce202ebb73b28c6330a
-
SHA512
515373069bc9a9555e9a16468f3b5d360ec6e41855009634cd6eda04210bc68851ff720a0a0c4cc5cc1be92ea760002dd12fe54fd41b765acaa81df5d086c2eb
-
SSDEEP
3072:3tlkvqcaipub0lxRrKy7dddc7fA6ko8qroZRxCcCi:8yWpZl3rKyvySNR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 03efe7c08aec761213077dcd18253edf
Files
-
03efe7c08aec761213077dcd18253edf.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 100KB - Virtual size: 100KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 2KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ