Static task
static1
Behavioral task
behavioral1
Sample
106f68cb5479a19fcf978f37ccd2d935.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
106f68cb5479a19fcf978f37ccd2d935.dll
Resource
win10v2004-20231215-en
General
-
Target
106f68cb5479a19fcf978f37ccd2d935
-
Size
554KB
-
MD5
106f68cb5479a19fcf978f37ccd2d935
-
SHA1
7fbefbf0361b5e612a30ead8c435991cfa03d9cb
-
SHA256
d53535620ec71a397b36d79a42957d82eec2082b486022c3b10706c412acba49
-
SHA512
4638cb14c9fb353b9c43e569541b53bdce43ed38a8ef650c02280c384d9a16b7ea4cbe9500a32050ecc1f55ac190917db5d71bf19ef82ad2af899daee6547371
-
SSDEEP
12288:J49Tm0nrQDJS5d/XkQLjBfeaRmCOBKHW75Ig+0ZJ93f7NJVEcT3:a9i6sDAzPkQLwuml4kIg+c9zNJWcT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 106f68cb5479a19fcf978f37ccd2d935
Files
-
106f68cb5479a19fcf978f37ccd2d935.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Sections
hao|hao0 Size: - Virtual size: 832KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
hao|hao1 Size: 333KB - Virtual size: 338KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
hao|hao1 Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp0 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 528B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ