input
Static task
static1
Behavioral task
behavioral1
Sample
12f6043d2be652d04074d6189191b649.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
12f6043d2be652d04074d6189191b649.dll
Resource
win10v2004-20231222-en
General
-
Target
12f6043d2be652d04074d6189191b649
-
Size
18KB
-
MD5
12f6043d2be652d04074d6189191b649
-
SHA1
d30f33c06b8b0874b4b53bc4426e866af3741ea8
-
SHA256
1082161ef957c8103525e42b3fda9cfb00aec67c8952a8552542c0ca0ef932d1
-
SHA512
319c210723205b44f4c93e9c53cf5b45e064c80287aab2303c3d37925f337561366470aa93cf2bf1fa57b502071e3528aa2e7d9c2e92aed5d1e326ab3ce19901
-
SSDEEP
384:rFoaCdl2ethAFn4yVii3yPCNVlUF+TNtvMtI9YoNVV/hk:rAdl2Z4yVb8CNVzTNB/9Yy/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 12f6043d2be652d04074d6189191b649
Files
-
12f6043d2be652d04074d6189191b649.dll windows:4 windows x86 arch:x86
75e7da525aa3791f096a47835def2391
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
ws2_32
WSAStartup
msvcrt
malloc
Exports
Exports
Sections
.text Size: 13KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE