Static task
static1
Behavioral task
behavioral1
Sample
254e2a03d3b205e90c688cf2d99a68b8.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
254e2a03d3b205e90c688cf2d99a68b8.dll
Resource
win10v2004-20231215-en
General
-
Target
254e2a03d3b205e90c688cf2d99a68b8
-
Size
196KB
-
MD5
254e2a03d3b205e90c688cf2d99a68b8
-
SHA1
66e0ba4f78b15ec6e72ef736cd4ab020b5e30256
-
SHA256
37bf1a1823c8f958a118de51c4ef7b5b1453b922e4c5ce480f6906016ed12bfc
-
SHA512
bca5b03c248bf700381df498a0dc3fe86584191d8cd370bf1deea9a237de3bf2412dd2a56df72c18a2621ae29f959ab22dd5857f023265016d42e5c630d05573
-
SSDEEP
3072:6+yD3dUMUKYyYZ+p/qQIOqUXlwHmwUXCuLrf/ScoTbMpU7mKV+ao:6X3yMUKnYZ49oHzauTbMify
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 254e2a03d3b205e90c688cf2d99a68b8
Files
-
254e2a03d3b205e90c688cf2d99a68b8.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.nsp0 Size: - Virtual size: 540KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 195KB - Virtual size: 196KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE