Static task
static1
Behavioral task
behavioral1
Sample
1ee955a3d231c41c37b8f97c0e21ea0d.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1ee955a3d231c41c37b8f97c0e21ea0d.dll
Resource
win10v2004-20231215-en
General
-
Target
1ee955a3d231c41c37b8f97c0e21ea0d
-
Size
162KB
-
MD5
1ee955a3d231c41c37b8f97c0e21ea0d
-
SHA1
f8f5462909c028c6d0b216aa470795fd5dbeede4
-
SHA256
af2071e98e81b500c01fdf07596a1c3706c8991eb59cd638146cac9799fce6e5
-
SHA512
200cd1199ad40a1997870503c31b497efbccad46b6032e19d3697a2326a68f4895c416251d82e92b4d44b2523805d69c01e3354e174bea5115c232132182fdbc
-
SSDEEP
1536:q6HZEf6D+eDhXyY9P/mpCZIh398hezgynFYNZqGQo6zSWcA:fHZEf66eVXnPeUI0HynFYWGmS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1ee955a3d231c41c37b8f97c0e21ea0d
Files
-
1ee955a3d231c41c37b8f97c0e21ea0d.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 3KB - Virtual size: 172KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 71KB - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE