Static task
static1
Behavioral task
behavioral1
Sample
0af8c255b56ff2e67aa3d0d0d4db806f.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0af8c255b56ff2e67aa3d0d0d4db806f.dll
Resource
win10v2004-20231215-en
General
-
Target
0af8c255b56ff2e67aa3d0d0d4db806f
-
Size
6KB
-
MD5
0af8c255b56ff2e67aa3d0d0d4db806f
-
SHA1
06bbf6dd09482a76f30fadedc86053d5d7b0f47a
-
SHA256
3c6d200c782833aadc2700e15b6527da479070c96075dee6de5ed6465e0a014d
-
SHA512
66de78b819ff7ec22297ca2c1b785042ff780d4e7230449fdc6b9240bf98144334d998073a153a0299a0d7dc3510333d8a7b7cad0314f3374e1f6fbf6cc63c01
-
SSDEEP
48:SYAzGwPU5KpNbGTyphMHyYCdmap1KAjeL7u4bWj7dt5YLZt/G5KPxFH9llvh+qX:qL/uT2h4POm+4aj7dt5YVcy7BQA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0af8c255b56ff2e67aa3d0d0d4db806f
Files
-
0af8c255b56ff2e67aa3d0d0d4db806f.dll windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 256B - Virtual size: 156B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
PAGEKD Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.edata Size: 256B - Virtual size: 250B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
INIT Size: 512B - Virtual size: 434B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 1008B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.reloc Size: 384B - Virtual size: 310B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ