ServiceMain
Static task
static1
Behavioral task
behavioral1
Sample
1ea293b23b51d93c3e5ba80297fb5831.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1ea293b23b51d93c3e5ba80297fb5831.dll
Resource
win10v2004-20231215-en
General
-
Target
1ea293b23b51d93c3e5ba80297fb5831
-
Size
46KB
-
MD5
1ea293b23b51d93c3e5ba80297fb5831
-
SHA1
c4162d05254f497d64aca559e4a89ec061277391
-
SHA256
e26efa5c6ccc17f25f591d98038b62313b1f3efa21f50046806e8f2d546491eb
-
SHA512
cf6389b414ae64d8e471d38ea7d20cf38b6863c38593d086ed0985163682ecb8f1c45744d269164846adffe0033e107fd0b982776dd7f057201799040d0a078d
-
SSDEEP
768:ZwqaIrF1RCMfz2H/kCfc2RAGkufmGnfeoqALacwF6pw+suOnti2xVbPX77N8tUk:BnR1/YkFsLkuuqfer87LOn82Xbvm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1ea293b23b51d93c3e5ba80297fb5831
Files
-
1ea293b23b51d93c3e5ba80297fb5831.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Exports
Exports
Sections
.nsp0 Size: - Virtual size: 120KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 45KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE