Start
Static task
static1
Behavioral task
behavioral1
Sample
1e1532f17bb12a5ea9210be76e4f9182.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
1e1532f17bb12a5ea9210be76e4f9182.dll
Resource
win10v2004-20231215-en
General
-
Target
1e1532f17bb12a5ea9210be76e4f9182
-
Size
11KB
-
MD5
1e1532f17bb12a5ea9210be76e4f9182
-
SHA1
3c11c031a6096ca5e989ee20777d2be501095bea
-
SHA256
11215261d755468ca085d14116dcd192c414f400b912980f641091245bcd4aa5
-
SHA512
e22b972e784fc6006750c6392d061a6bc5719523cb7d7ba6ba846b2386f75339a48e301fb9768b1a8ce1ada0e656cf6ee9a2fe9788b7a6ac8fb8520ad1ebf7a2
-
SSDEEP
192:mRGo4DzTaFnQTiLuy5RYjccM56YCSuA4n+7kUr8650SbkKKbydUCBf5DkgUwuW:cG22i/5+jxW39upn+7kUrRKzw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1e1532f17bb12a5ea9210be76e4f9182
Files
-
1e1532f17bb12a5ea9210be76e4f9182.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
.Upack Size: - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE