Static task
static1
Behavioral task
behavioral1
Sample
29cc80a295fc64db94f9dba20891aeab.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
29cc80a295fc64db94f9dba20891aeab.dll
Resource
win10v2004-20231215-en
General
-
Target
29cc80a295fc64db94f9dba20891aeab
-
Size
79KB
-
MD5
29cc80a295fc64db94f9dba20891aeab
-
SHA1
10e4738fb41002d5e24561ffd5ae7820736d2d46
-
SHA256
52d9df9db43721769ab30ee0ee437e7eb48578032c692caf0be5b7e26d5ea1be
-
SHA512
7d645801e661d15e2efe6cf1c77f7c3da07380771817655006fc152cbd46fbc0bcff340800281ac6da769dc3f513e1eb8328704917b8b3e9b7a9c8c1b42d6279
-
SSDEEP
1536:KqiE3RmBHalq0kPznkKLKf1zmqQRiaBSo:KqiGozbg1zmqQoaEo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 29cc80a295fc64db94f9dba20891aeab
Files
-
29cc80a295fc64db94f9dba20891aeab.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
Size: - Virtual size: 92KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 54KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE