Static task
static1
Behavioral task
behavioral1
Sample
2789e3fcb94591a959c7472af9ba1b91.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2789e3fcb94591a959c7472af9ba1b91.dll
Resource
win10v2004-20231215-en
General
-
Target
2789e3fcb94591a959c7472af9ba1b91
-
Size
31KB
-
MD5
2789e3fcb94591a959c7472af9ba1b91
-
SHA1
fce7643e2fa2fc106b154f4d320948ea9620de6a
-
SHA256
f007db9cb760bad88ebed4e9e3f79b44d157ce2d3cf89f45f9b9edb5d351038d
-
SHA512
719b7bd1885cb4c97986b5b39e89b0481df393de0e24579c629d74fe90de70e260a7045b493cef3fce64149a50b2f7b8c3d1e6612ce809037c88dca6e9e728b2
-
SSDEEP
768:unYFrHM2qjYrQb23xhNbAXweUWz/uQ0dDgmSpCoMPmL3:rrHM2TrQbUx3AXBBCQ0dkmSpCoM+L3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2789e3fcb94591a959c7472af9ba1b91
Files
-
2789e3fcb94591a959c7472af9ba1b91.dll windows:4 windows x86 arch:x86
bf3132895723e15c3382249685e23069
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
VirtualProtect
GetProcAddress
LoadLibraryA
VirtualAlloc
VirtualFree
Sections
.text Size: 22KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 398B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 212B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
attach Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE