Static task
static1
Behavioral task
behavioral1
Sample
2856bf3e4f7be127bd854998b1313369.dll
Resource
win7-20231215-en
General
-
Target
2856bf3e4f7be127bd854998b1313369
-
Size
58KB
-
MD5
2856bf3e4f7be127bd854998b1313369
-
SHA1
0335e0033267f27ee49aecd7bda109e0f831cbc6
-
SHA256
5cb1ec0ac594ceef42be8be8361f6ad27b63468b2a84509f61f64528413f7e88
-
SHA512
cfdde82bb39bfe024f09cefc5b086a51b7cadab9bc996715f07d28a38ec0e23fd69dcc4ec6cf9d67b79b0438331b281f26be3028c53a8ecc959065f6436dea24
-
SSDEEP
768:Z74XSDgbahXrerQvaONvqm87WRmrQ1JaGaeb9fME7MhHrGpJByuXw0+d8wKpqCaZ:BXr9aONP87imrya9eRnMyrXj+dqpF8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2856bf3e4f7be127bd854998b1313369
Files
-
2856bf3e4f7be127bd854998b1313369.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
���� Size: - Virtual size: 112KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
���� Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Aisht Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
���� Size: 364B - Virtual size: 356B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
���� Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.thsia Size: 100B - Virtual size: 100B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.thsia Size: 100B - Virtual size: 100B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.thsia Size: 100B - Virtual size: 100B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE