CreateObject
Static task
static1
Behavioral task
behavioral1
Sample
1f875d48bd2a53c6a9b7b51af9c00fa4.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1f875d48bd2a53c6a9b7b51af9c00fa4.dll
Resource
win10v2004-20231215-en
General
-
Target
1f875d48bd2a53c6a9b7b51af9c00fa4
-
Size
680KB
-
MD5
1f875d48bd2a53c6a9b7b51af9c00fa4
-
SHA1
90a1e1cb9899e3b470848d12751a275e13157c26
-
SHA256
c140042a8b175369d8faef7c2747589f4894426895605dc0571befdedf400a28
-
SHA512
e899c1dc26fd19a85b1ad7b438fce5e268552186c704e82a7f582fb6a1eebc4c962758ad347a803715bce43a175950f7c6141f60c88682317e17520ff5f327bd
-
SSDEEP
6144:ge5b342QVA4r8XTrOnVtpR23BdxA5wDgJ/kIGQny1ZRZV6Xuwxe:g2j42Mm2VtEdy/JMRQnSZA1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1f875d48bd2a53c6a9b7b51af9c00fa4
Files
-
1f875d48bd2a53c6a9b7b51af9c00fa4.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Exports
Exports
Sections
.nsp0 Size: - Virtual size: 732KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 299KB - Virtual size: 300KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE