Start
Static task
static1
Behavioral task
behavioral1
Sample
1b13ea4ac0f7e6de6bd09d1c2c5d36ae.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1b13ea4ac0f7e6de6bd09d1c2c5d36ae.dll
Resource
win10v2004-20231215-en
General
-
Target
1b13ea4ac0f7e6de6bd09d1c2c5d36ae
-
Size
211KB
-
MD5
1b13ea4ac0f7e6de6bd09d1c2c5d36ae
-
SHA1
44325ca1de7fc02c08aea4555b771cfd7e97aa00
-
SHA256
32529047aab55dead829dee2b2fdfe077c6fa0b49eb87758ed15ee6f5ba6b542
-
SHA512
e1cbb7f565209dd67da541187ae97679b4d4d8e0fa4de0048590f0a64fc5fd620b0e932cd6ebddc783b56f28b4d0ea2356841e1098c23bd8dbb6948d6b6e1dfd
-
SSDEEP
192:75+mZM0iE6Tq+ub6hldosh/6UtfTlCtlTNSQqia5p5T+tlJqkgUw93:75+mm0OTq+uef7h/6QfTlQDavN2lJlI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1b13ea4ac0f7e6de6bd09d1c2c5d36ae
Files
-
1b13ea4ac0f7e6de6bd09d1c2c5d36ae.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
.Upack Size: - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE