Static task
static1
Behavioral task
behavioral1
Sample
21b5945882ca1763acac3ea7f96a2992.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
21b5945882ca1763acac3ea7f96a2992.dll
Resource
win10v2004-20231215-en
General
-
Target
21b5945882ca1763acac3ea7f96a2992
-
Size
6KB
-
MD5
21b5945882ca1763acac3ea7f96a2992
-
SHA1
8b5177bc4fd30603554d461027dc423de0906651
-
SHA256
7c05f2764c4e1986e56fed9db2de2415a2a7ef0c66fc5df20383928f6b800528
-
SHA512
8a98d0954cc3a9495899bcb403880b1ac84097d91446045e680cbf96a385eec01d15671a3385485d7db9f3484ee2ffa1d5ec6ebb8fd9d4ccb95ce9cedd03e8f7
-
SSDEEP
192:gH5lDlyOTzToId8ge9zwsgIA/vukgUwufq:IVl5p8nCsJA/5dq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 21b5945882ca1763acac3ea7f96a2992
Files
-
21b5945882ca1763acac3ea7f96a2992.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.Upack Size: - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE