start
Static task
static1
Behavioral task
behavioral1
Sample
27ab8835e8574f439b37ebe8ce1fe871.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
27ab8835e8574f439b37ebe8ce1fe871.dll
Resource
win10v2004-20231215-en
General
-
Target
27ab8835e8574f439b37ebe8ce1fe871
-
Size
44KB
-
MD5
27ab8835e8574f439b37ebe8ce1fe871
-
SHA1
1262dfd905bdc4bb5ca3fb689947b4852f33f741
-
SHA256
1c8846ddd8020dd72de038f794a1bfb429111277849a9d300471709988a9d84d
-
SHA512
d9c543c7112233b2857a464e1335cc2b402767de3a938d9667d9cf7e50dbf9d39094803ae431c3cf465f3199c4c84c5e98552bda6db305775a4f444d1c500d18
-
SSDEEP
768:yaZ6ODFSyzHvMHvhIy0q1yfrB6rF2j7pGov2:yaZ1rHE5f03foa9Gov
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 27ab8835e8574f439b37ebe8ce1fe871
Files
-
27ab8835e8574f439b37ebe8ce1fe871.dll windows:4 windows x86 arch:x86
5544a558178895c012502baa823128b4
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
ws2_32
connect
advapi32
SetSecurityDescriptorDacl
Exports
Exports
Sections
.text Size: 39KB - Virtual size: 108KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE