Static task
static1
Behavioral task
behavioral1
Sample
1667714b9b0ec54fc66e09b0e41489ef.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1667714b9b0ec54fc66e09b0e41489ef.dll
Resource
win10v2004-20231222-en
General
-
Target
1667714b9b0ec54fc66e09b0e41489ef
-
Size
127KB
-
MD5
1667714b9b0ec54fc66e09b0e41489ef
-
SHA1
de6153796c0e874cd8069252d184cf762b3849aa
-
SHA256
ff0ea811e23d952209d16822d0eea890510625333204458c92c5a0d23f3c0e3a
-
SHA512
dbeb822c69f46667a32d39dcdced16d52381971316bddd6dc732acdeb144c568603bb11099b90157a59b4f2ed2e951fab976f0c69213b7c6d27853f0befd1fb1
-
SSDEEP
3072:pZH+F5vCwy7fpy/XTp2yJEv8brsd7NGaPdHaqqX99:pZHO5ny7feXTAyCvrD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1667714b9b0ec54fc66e09b0e41489ef
Files
-
1667714b9b0ec54fc66e09b0e41489ef.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 107KB - Virtual size: 106KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 2KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ