Static task
static1
Behavioral task
behavioral1
Sample
36929c596794a87e502eda4c30335d14.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
36929c596794a87e502eda4c30335d14.dll
Resource
win10v2004-20231215-en
General
-
Target
36929c596794a87e502eda4c30335d14
-
Size
13KB
-
MD5
36929c596794a87e502eda4c30335d14
-
SHA1
297bdae40d909ebe8e901de0993ba2b3c6a0e890
-
SHA256
58d553554fbdb6897c028e50b57a63eb5e5351548411c315524aaf239432d453
-
SHA512
d7edce4dc786b257828a00f6bf59cb3e076f79bf81e4cb66fce7c206c6c16d730145aa89d6ca7272d93b11f73250c2bb61e3f02a5283233a2482e0f1a6804b96
-
SSDEEP
192:UHgQJf6rGIhOG4uXLbeQ/HrG/SvvWQPvny2WipHAMy8apY:UHgkpIhg6jWS3PWeAMyY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 36929c596794a87e502eda4c30335d14
Files
-
36929c596794a87e502eda4c30335d14.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 52B - Virtual size: 404KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 728B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ