Static task
static1
Behavioral task
behavioral1
Sample
0d1e1c625b1f3dbd24be24d638b6601d.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0d1e1c625b1f3dbd24be24d638b6601d.dll
Resource
win10v2004-20231215-en
General
-
Target
0d1e1c625b1f3dbd24be24d638b6601d
-
Size
32KB
-
MD5
0d1e1c625b1f3dbd24be24d638b6601d
-
SHA1
3fb775f4af7dd599e3edc69cab582c044f9ddac2
-
SHA256
e50cf3d09cec01e39aa9c48bc6861e2b3b118591756324e6f1484cd2fd4bafda
-
SHA512
af70c5084ffb4f0de62c36cf8272b40d4961742dda0951a41fef97d6dca044450893160bd11179cb9365b872f16495e188a889860a819941dad016c9841c6e65
-
SSDEEP
768:X4satWAyZGZurpLmknc9hKr98e6WeUPKvJ4oV+2:okAyZEurpykcnKrueB6N
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0d1e1c625b1f3dbd24be24d638b6601d
Files
-
0d1e1c625b1f3dbd24be24d638b6601d.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
yg Size: - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
oyetbv Size: 31KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
2fir Size: 543B - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE