Static task
static1
Behavioral task
behavioral1
Sample
0c8875c4332589e47200a6da20a38d9d.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
0c8875c4332589e47200a6da20a38d9d.dll
Resource
win10v2004-20231215-en
General
-
Target
0c8875c4332589e47200a6da20a38d9d
-
Size
33KB
-
MD5
0c8875c4332589e47200a6da20a38d9d
-
SHA1
2d6f2023fafd6f940174cc18771b68f2589eaf44
-
SHA256
d1bbe1d9d78d3d92394d2c3016548777eb9f822e5983a4e6bf879cebfcdaf885
-
SHA512
d4478c4d86810d3f926968c5893d40a88f7196cadd892b8c06a7ab54cb2a98f842e81dd9a2b3418de7f972bc17658acaa57415422714f6226809429654d57ffc
-
SSDEEP
384:jbO2o+08jYK83OpDwb5pbh/I3R9l1COSuoUz2cTJ7O6UY8WbcUxD1xEkqT9Hn6Hy:PO2o1B3OL3RaN96M6B3w9Hn6Hy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0c8875c4332589e47200a6da20a38d9d
Files
-
0c8875c4332589e47200a6da20a38d9d.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 10KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ