ServiceMain
Static task
static1
Behavioral task
behavioral1
Sample
1454c86bc8e24295d1fc27da5ce0d77f.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1454c86bc8e24295d1fc27da5ce0d77f.dll
Resource
win10v2004-20231222-en
General
-
Target
1454c86bc8e24295d1fc27da5ce0d77f
-
Size
473KB
-
MD5
1454c86bc8e24295d1fc27da5ce0d77f
-
SHA1
c86a90cfc355c2405b277582e4cdfb287b72a98d
-
SHA256
f328b1b07ca54f9f5d5b9e2a67b9633d250ccc67aa4ef1bb1aa129a2a191413b
-
SHA512
d10cdc620647f0bcd3cd46c11d5af9a0f108102d557f3da8d9947f78a4403e3af446acabc4d2cefb5eb51a5f23d50d876dc3109d24982507fb06ce397a883242
-
SSDEEP
12288:DAystNuxxmXWmQ389jfUHVGGidSN+PXF:DAdjvXWmQ389jfKVonP1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1454c86bc8e24295d1fc27da5ce0d77f
Files
-
1454c86bc8e24295d1fc27da5ce0d77f.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Exports
Exports
Sections
CODE Size: 400KB - Virtual size: 400KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 8KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 512B - Virtual size: 72B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 33KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ