Static task
static1
Behavioral task
behavioral1
Sample
2885bb8ba0cc997af1f82b6f86585018.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2885bb8ba0cc997af1f82b6f86585018.dll
Resource
win10v2004-20231215-en
General
-
Target
2885bb8ba0cc997af1f82b6f86585018
-
Size
68KB
-
MD5
2885bb8ba0cc997af1f82b6f86585018
-
SHA1
952cf9c00b2577a201f92fe81f9eda8f113d952f
-
SHA256
e0d6ee2d9231a9c158b78bc0f2edab280cdbb0cfc4d741df669db51b6c962329
-
SHA512
c61790b7490039bf5542a2893c9d21b92c1248cbd14757a0c0f0f8ea96f584ea85b7d3bb549b0ece68a70aaf4f74f970c72c0bde41c4091e89ea29860004173f
-
SSDEEP
1536:MyFnapTYVPu/FwHOCXhPdWz/yBxlIEK6k:Myd4uPUKu8dlFPk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2885bb8ba0cc997af1f82b6f86585018
Files
-
2885bb8ba0cc997af1f82b6f86585018.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
Size: 3KB - Virtual size: 80KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 53KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE