Static task
static1
Behavioral task
behavioral1
Sample
28d4732271beaa163784e8bd8fa7fb6e.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
28d4732271beaa163784e8bd8fa7fb6e.dll
Resource
win10v2004-20231215-en
General
-
Target
28d4732271beaa163784e8bd8fa7fb6e
-
Size
63KB
-
MD5
28d4732271beaa163784e8bd8fa7fb6e
-
SHA1
cbc9e9a2f5536e6514fd57ecd48da297e102f0a4
-
SHA256
a2fd7b9ae25dbb815ba1f3bebb3b0a42fe3c45059d2dfdec51ed669128c47d33
-
SHA512
2b94d762892e0d812ea0bc1d19648d045037471d9a5ad100ae998ebcaf4ffd0a0f894a9cda9b0d7888117e11dff3906dbdf148f19d1153760e4bcaafc65493ec
-
SSDEEP
1536:sMOkOCj/W/vT10N4E+jHudVFR9e1/dg+:fg/vuOz7+VFmg+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 28d4732271beaa163784e8bd8fa7fb6e
Files
-
28d4732271beaa163784e8bd8fa7fb6e.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 55KB - Virtual size: 55KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 512B - Virtual size: 352B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 2KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ