Static task
static1
Behavioral task
behavioral1
Sample
0cb798b12e019a538de6eaceb16d9432.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0cb798b12e019a538de6eaceb16d9432.dll
Resource
win10v2004-20231215-en
General
-
Target
0cb798b12e019a538de6eaceb16d9432
-
Size
14KB
-
MD5
0cb798b12e019a538de6eaceb16d9432
-
SHA1
55243e12d02a17106c3f457f8694288a18cd6137
-
SHA256
e284a472d011f0e6f00349ac6accb8b8769d995f2459ef3821ca105c229c2526
-
SHA512
25ae33237d867eab7f9c8cb75d85cd7ac13881506548a226f182d8e1550c4054da04d027ae44023a9da9825cff08999e4c0a18f8eff466976712f740fe3c5b7a
-
SSDEEP
192:8n7kcfo4ypudp6mZIgCYWRLMAUPRiVSnPIwqYKmX6QlvvRWEA4c0wvMylefJkgUH:87kOVyob6GIldTUPRiYs9ivXsVM5GH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0cb798b12e019a538de6eaceb16d9432
Files
-
0cb798b12e019a538de6eaceb16d9432.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.Upack Size: - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE