Static task
static1
Behavioral task
behavioral1
Sample
17777257ed494cf0ea75b869a535c8f5.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
17777257ed494cf0ea75b869a535c8f5.dll
Resource
win10v2004-20231215-en
General
-
Target
17777257ed494cf0ea75b869a535c8f5
-
Size
156KB
-
MD5
17777257ed494cf0ea75b869a535c8f5
-
SHA1
ad22bd07b4766ff67f05f01dd65c0d128a060781
-
SHA256
982be5e56dbd500dfb243fc9ca205be48bae1b492975b5bce2a96e09cd46d546
-
SHA512
7d7842030e05cff5d3810f8240b24b9a83a9a0aa7c8ccf30a3859c7171b418b43adfe1e542f444b6704122caad8fa8a860d575e20a47afc92bd3c1536ff13d96
-
SSDEEP
1536:vLMydMlWpt1Sd7iyt7QXLi7EN5Tv2fb87BK04wu5mk90wp48DinMrLQJ6AV0:vLMyW77iytsXLi76iNbZ1iMrLt7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 17777257ed494cf0ea75b869a535c8f5
Files
-
17777257ed494cf0ea75b869a535c8f5.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 84KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.BYShell Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE