ServiceMain
Static task
static1
Behavioral task
behavioral1
Sample
09ea634fdd5e939ef7692acbea05d222.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
09ea634fdd5e939ef7692acbea05d222.dll
Resource
win10v2004-20231215-en
General
-
Target
09ea634fdd5e939ef7692acbea05d222
-
Size
13KB
-
MD5
09ea634fdd5e939ef7692acbea05d222
-
SHA1
c5167ac7395ad312da5d937ce5e8c70085ccdb59
-
SHA256
2efe6e8198c9247f2d07027ea42542661a558e550969b1010cd17c679101ec4c
-
SHA512
fc2e1d3488c95cbcf53ff5cb0de38e9e326574453cada90958f239b17600223e53550597d79b6f76a739d41a6215118794c5d9b625d9ee1e3b38874de5a5ae2f
-
SSDEEP
192:I+VmSdRUxbgCfLeuaavmLxviiddrKK5tYVYd6GKEBrdkbcFI62l6stf0Px:ZVmSdRube1ayHKK5tmAjKu2bJ6stkx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 09ea634fdd5e939ef7692acbea05d222
Files
-
09ea634fdd5e939ef7692acbea05d222.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
Size: 8KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.petite Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE