InstallALLHook
Static task
static1
Behavioral task
behavioral1
Sample
221100e7f965a905f228b5a433633981.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
221100e7f965a905f228b5a433633981.dll
Resource
win10v2004-20231215-en
General
-
Target
221100e7f965a905f228b5a433633981
-
Size
58KB
-
MD5
221100e7f965a905f228b5a433633981
-
SHA1
0e940b2e969e7db3e74288b251b09e5251b51b3b
-
SHA256
088b9e894780b9036c35485d89fd0b0c9928b7cc5de4da3112b7dc75ac6fe6e0
-
SHA512
6b2062e3d93006aec8bc47b788bce6ef57da61350fd7f0c842cf483b46c84575f55dfb90c74bb65406e98389acb78431cbad26912765a3a9de63c9cced558a95
-
SSDEEP
1536:fsqQ/tsD4ny1u6ya7OM98oQvkYU+wfMY2t:U/tIpyWOy8pvk7q
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 221100e7f965a905f228b5a433633981
Files
-
221100e7f965a905f228b5a433633981.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Exports
Exports
Sections
CODE Size: 48KB - Virtual size: 47KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 2KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 512B - Virtual size: 75B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ