Static task
static1
Behavioral task
behavioral1
Sample
1dba0191035c368f203db972c9c0350f.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1dba0191035c368f203db972c9c0350f.dll
Resource
win10v2004-20231222-en
General
-
Target
1dba0191035c368f203db972c9c0350f
-
Size
63KB
-
MD5
1dba0191035c368f203db972c9c0350f
-
SHA1
7d8c3176bf39456b088178988077496c9d5a6c0a
-
SHA256
ddac789f57acd5d0d93c260aa47067dee022a740f6365e91c9a6fd8343d51335
-
SHA512
39da6b106d5d9fe60237de3c700e4308a66fcd9a0356b996dbc1b4da08d0763b9dd1a92b8fb91ee7c0120daec3ce2decc3c1abeb5557346abfed0e5224db7b1d
-
SSDEEP
1536:8MOkOCj/W9hBAoKUHwWeATjCqVEABvo+:Pg9fo8Tuq2L+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1dba0191035c368f203db972c9c0350f
Files
-
1dba0191035c368f203db972c9c0350f.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 55KB - Virtual size: 55KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 512B - Virtual size: 352B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 2KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ