Static task
static1
Behavioral task
behavioral1
Sample
0b0ee477c973e54761934e90e6ee6cdc.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
0b0ee477c973e54761934e90e6ee6cdc.dll
Resource
win10v2004-20231215-en
General
-
Target
0b0ee477c973e54761934e90e6ee6cdc
-
Size
120KB
-
MD5
0b0ee477c973e54761934e90e6ee6cdc
-
SHA1
7a6aafc8b76139ad34ddd0445023ccaa8ef94a31
-
SHA256
c25a4c87fa339e1fbde4c6fc9ae92a46d2ccb7aaa972e35148a347f75e14b52f
-
SHA512
c6d34a18f19b35e8b4d29bd03f56d888c0337b409fad7c98c26a8f3f9a4ee538025700358ab845fa1c7a8512dbcf104a605e861bd6c26418ebcba2996f395c83
-
SSDEEP
768:DPf+JIS2LiMti1TjDI4QN1qEHY0J41NBw6/poqiqDctxFBfZ44QfFfh:DXq2v79NpT4zBw6VDcJp5A
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0b0ee477c973e54761934e90e6ee6cdc
Files
-
0b0ee477c973e54761934e90e6ee6cdc.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.Upack Size: 64KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 52KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE