start
Static task
static1
Behavioral task
behavioral1
Sample
2a81ad73d80bcb78b25569bdb79bb606.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2a81ad73d80bcb78b25569bdb79bb606.dll
Resource
win10v2004-20231215-en
General
-
Target
2a81ad73d80bcb78b25569bdb79bb606
-
Size
192KB
-
MD5
2a81ad73d80bcb78b25569bdb79bb606
-
SHA1
b1d26c8f78039c1c474fc7d25b03d7bd601fc71c
-
SHA256
7fd8994ec79919481211d4f1b6d83a372aad527caa99b82eba8e165cfd958876
-
SHA512
7c582f7eb7ecbd11f0e2e73f00d9bc1387ddc54e418aa521172293b9d571953fad82fb7a8f3be5349605d2d0aa2ec3a5510a7b8d3057ec4c87dc4cc259c8b22e
-
SSDEEP
3072:/CzHdGaky/IboEzSTwro22esWcJ1meXJZmEfcPODT9ZajBdkHKvr6LHR/WL7G+HE:/CjdpWlzMesWcHmenfcP69Z0gqvraHR3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2a81ad73d80bcb78b25569bdb79bb606
Files
-
2a81ad73d80bcb78b25569bdb79bb606.dll windows:4 windows x86 arch:x86
3c0e70bfa5f73f1f1cef484e2bcb5bf8
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GetModuleHandleA
user32
MessageBoxA
Exports
Exports
Sections
Size: 116KB - Virtual size: 220KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 21KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 25KB - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 13KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE