?Dll6Main@@YGHPAUHINSTANCE__@@KPAX@Z
Static task
static1
Behavioral task
behavioral1
Sample
13b500fa529c13724375f12860881588.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
13b500fa529c13724375f12860881588.dll
Resource
win10v2004-20231215-en
General
-
Target
13b500fa529c13724375f12860881588
-
Size
11KB
-
MD5
13b500fa529c13724375f12860881588
-
SHA1
4bfc87457fc5a7206aa925f560a41f8ece764035
-
SHA256
12ee0abaff4148c34f1127cf6885dd6f2ba78c2d99915edd1a7e6793de5b4d94
-
SHA512
ca4061af1c1a6a6e31825ae7c3ea19b3fd6257b58451f0b07ba866b760c293b14338e6825cd754f87c5f2cff9464081b102c1c0fa8207925bd117ed7159fce49
-
SSDEEP
192:mPoW/WyrTX4EGOue2EG1HixdmFvBDvdyexDwxWZmEc:mPoW/WoT7GOue2EkCxdmFvXbyxWVc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 13b500fa529c13724375f12860881588
Files
-
13b500fa529c13724375f12860881588.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
Ph�0 Size: - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Ph�1 Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Ph�2 Size: - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE