Static task
static1
Behavioral task
behavioral1
Sample
22595cc3985cf8f7df8b13435d7deda7.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
22595cc3985cf8f7df8b13435d7deda7.dll
Resource
win10v2004-20231215-en
General
-
Target
22595cc3985cf8f7df8b13435d7deda7
-
Size
381KB
-
MD5
22595cc3985cf8f7df8b13435d7deda7
-
SHA1
bf5adcaa9c8d3e8749373d35adddbede023683a2
-
SHA256
3b7e49c15fc5053be71a3190a3b9f09200073a2b590bf13c7a53e13150b14a34
-
SHA512
56fc0c33ff984fd3b4c2ce1579f85e7b05cd99504d15704e0db4b175e74808450ee81234876fa5db2d5c62800574e1dc2ee50d536c10b829bf457dd91d74935b
-
SSDEEP
6144:46QGvDslM263IKiZcZPdN1jtYsDF2xXtQo9DE4A04+hWTmWNm30D2:46vDs+l3IKLz3xYsgtQolEf04AWTmbED
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 22595cc3985cf8f7df8b13435d7deda7
Files
-
22595cc3985cf8f7df8b13435d7deda7.dll windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 273KB - Virtual size: 272KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 61KB - Virtual size: 61KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 17KB - Virtual size: 285KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ