Static task
static1
Behavioral task
behavioral1
Sample
1dcd8642bbc473d909ccaea94a896df2.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
1dcd8642bbc473d909ccaea94a896df2.dll
Resource
win10v2004-20231215-en
General
-
Target
1dcd8642bbc473d909ccaea94a896df2
-
Size
1.3MB
-
MD5
1dcd8642bbc473d909ccaea94a896df2
-
SHA1
5293b7a887d7f646a330eee60ce44214aa2ec06c
-
SHA256
e55847e47d89154b88e585e4c0348b9a6cf68b52985f95a22db75c0e08133a88
-
SHA512
acc5a76a38fb849ffa30a08caec12ccb2ac706dc1dfb212128c983aea86a4f1f0e435ead4ba1437dd1f05ebec221bdf366d093d5281aae12ceddcaf16eff96f3
-
SSDEEP
24576:PCKvmgYv0k3wMlSFuNaE2gq1SoeuZXwpgl/sudbz:6+n1F2a9UQ4grdf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1dcd8642bbc473d909ccaea94a896df2
Files
-
1dcd8642bbc473d909ccaea94a896df2.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 336KB - Virtual size: 335KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 3KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 965KB - Virtual size: 965KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ