Static task
static1
Behavioral task
behavioral1
Sample
2904d2af7581f1af6e4ba7a4e8522edf.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2904d2af7581f1af6e4ba7a4e8522edf.dll
Resource
win10v2004-20231222-en
General
-
Target
2904d2af7581f1af6e4ba7a4e8522edf
-
Size
25KB
-
MD5
2904d2af7581f1af6e4ba7a4e8522edf
-
SHA1
0f180073f8f9714773fe762f2d2cf3024139afbb
-
SHA256
106171ba77bb1bbd0f4d3e52fec22430e6c1864a94c7ae80e5b0c6c590285b33
-
SHA512
f49b5fcebe85b6fe4549816afe571dffd297ebfc7426c80d5d6ed62aaefd1528cf5e3fb8eecf0c259d3afef2fe377d98e25422be03af50f7fb0aab546bbeabc0
-
SSDEEP
384:mdZibPLqEH883VHVkTlHOl4/cHK3b4y9T00TTWSyA/YNDtrHEyy:mT8qgoSpHK560TTWSqNDtrq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2904d2af7581f1af6e4ba7a4e8522edf
Files
-
2904d2af7581f1af6e4ba7a4e8522edf.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 17KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pdata Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE