zyd1_6
Static task
static1
Behavioral task
behavioral1
Sample
2b15c6890c70806574940bd980c1b047.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2b15c6890c70806574940bd980c1b047.dll
Resource
win10v2004-20231215-en
General
-
Target
2b15c6890c70806574940bd980c1b047
-
Size
29KB
-
MD5
2b15c6890c70806574940bd980c1b047
-
SHA1
7fdedc830350ff2af33b379fa6eaad77bd07d88f
-
SHA256
7f3ced76c8eebe6dab15a7e7858c698e229518a48195a7332c605d037855435b
-
SHA512
affa4743d5a10dcf3a491270a7b2275fa848762ac7ef65ea6d93abe258416106bc0014b56d2ac4eb01b8f717e530a7020876f3530e69a2bc75e9c0c01d9087f9
-
SSDEEP
384:styuzmk3ySFy81TvV5OFX9X30WkOAYoMdo5uWOauMfuVutBYBE0I97qooT1G1GY4:0M81TvV54Z30WozwTRYuVoP0Zjfg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2b15c6890c70806574940bd980c1b047
Files
-
2b15c6890c70806574940bd980c1b047.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Exports
Exports
Sections
CODE Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 512B - Virtual size: 180B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 1KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 512B - Virtual size: 69B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ