Static task
static1
Behavioral task
behavioral1
Sample
0c94d2067548a2b5efe81f656ee4a42b.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0c94d2067548a2b5efe81f656ee4a42b.dll
Resource
win10v2004-20231222-en
General
-
Target
0c94d2067548a2b5efe81f656ee4a42b
-
Size
71KB
-
MD5
0c94d2067548a2b5efe81f656ee4a42b
-
SHA1
1df58bcd5941fba7800ecdafd0252fe2d09b490d
-
SHA256
b831d1eb267f23d72b714edd39f60369e27efea5f616f604679db2ca6e0ccaf3
-
SHA512
4ed09d1c5391b855bb7139c81b0d981550dada5af1eeacf15c5a2fb16d75c7a43558d1aacc21cca76284461233f220ef5f60aaee0f026b4e5cf6bfcc47ee1c72
-
SSDEEP
1536:6fmFEwc7TIfRx54CqxcTCQ4YKMSRVOJVsn6/qZaFFANPvK7i:6fmFEwcofRx9Qc2QRKMS0sn5ZaFFAN67
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0c94d2067548a2b5efe81f656ee4a42b
Files
-
0c94d2067548a2b5efe81f656ee4a42b.dll windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.code Size: 65KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 427B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 30B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE