Static task
static1
Behavioral task
behavioral1
Sample
0c1b05ca4c928a99c3698a0ab817e1a9.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0c1b05ca4c928a99c3698a0ab817e1a9.dll
Resource
win10v2004-20231215-en
General
-
Target
0c1b05ca4c928a99c3698a0ab817e1a9
-
Size
13KB
-
MD5
0c1b05ca4c928a99c3698a0ab817e1a9
-
SHA1
bed008c01c041b5a3e3186e289b6a5e6a3408b69
-
SHA256
b44e9f039881588b5e747a0e03ceafb1d7e054044c764c3eafac25b2caf4b420
-
SHA512
fd49c3e54d4e6662bd681ed5f770ecf64114fce707ee301c58a90e7f85bc24933a44de9ff0c5101996d2ec8bf3cbde4b31d45f2171f8a79e71d0ce7756d6d7e6
-
SSDEEP
192:GQgqYJ5woXVpIR8tLDBadcUhcfcMtIl6yxgCqaSMZ2p2ebdw4lwOD6MJj3fgIkg/:GQgB5VXQRcLFadBgIg8Wqgwi6M1vgXq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0c1b05ca4c928a99c3698a0ab817e1a9
Files
-
0c1b05ca4c928a99c3698a0ab817e1a9.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.Upack Size: - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE