Static task
static1
Behavioral task
behavioral1
Sample
25c0d040b901c6614bd7de3d255ebe35.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
25c0d040b901c6614bd7de3d255ebe35.dll
Resource
win10v2004-20231215-en
General
-
Target
25c0d040b901c6614bd7de3d255ebe35
-
Size
8KB
-
MD5
25c0d040b901c6614bd7de3d255ebe35
-
SHA1
9dc9f986c8290d5fcf0e5f271b9adad216b4aaca
-
SHA256
e91da2c70011e3ab987cf3a30975c34535d56b9a34ce2e0b176a3373704ebdb7
-
SHA512
04679aaf8896509a455318eede550fcacadb2417af1b1f9cdcc72c8fedf01e358da67fc5a464aaa379bb95b0ee0f68788afe9926bc131285c423bfbb89774662
-
SSDEEP
96:HxrnmHIvWyE2qPqLeJdWiS5t4i3I9eFWn1jGw9mCq1AddRimD:JmQeqL0yPZ49b15nq1YT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 25c0d040b901c6614bd7de3d255ebe35
Files
-
25c0d040b901c6614bd7de3d255ebe35.dll windows:4 windows x86 arch:x86
87bed5a7cba00c7e1f4015f1bdae2183
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
LoadLibraryA
GetProcAddress
Sections
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 708B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ