Static task
static1
Behavioral task
behavioral1
Sample
1580ecaadf293b33eba43ec8c9482e69.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
1580ecaadf293b33eba43ec8c9482e69.dll
Resource
win10v2004-20231215-en
General
-
Target
1580ecaadf293b33eba43ec8c9482e69
-
Size
156KB
-
MD5
1580ecaadf293b33eba43ec8c9482e69
-
SHA1
eecdf97e2907b3f82073416e4a0ce43e2d5871ab
-
SHA256
57b890e74f5306d8915b505b09a42100c2a32b053e01f5652acd50d5f235d8ed
-
SHA512
0edaf7f9cf9d17055aa17fa2c92daf4b79bb65018d255e682179adb3ef9ddda18a7988eb120ddc1e63aae06dc7739f82e096ec1459a31c4076b684d55a785bc3
-
SSDEEP
3072:J/2WK0sXD7mNOk8546sceMd0x+T52hre1ABx2pG:VtUmNOfscrdXoS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1580ecaadf293b33eba43ec8c9482e69
Files
-
1580ecaadf293b33eba43ec8c9482e69.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 113KB - Virtual size: 112KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 2KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ