Static task
static1
Behavioral task
behavioral1
Sample
37257c444fe9108b12942f54c3e2f1b5.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
37257c444fe9108b12942f54c3e2f1b5.dll
Resource
win10v2004-20231215-en
General
-
Target
37257c444fe9108b12942f54c3e2f1b5
-
Size
751KB
-
MD5
37257c444fe9108b12942f54c3e2f1b5
-
SHA1
5a1b09d1ee4ef088a085ef93c52dbb74eb4d0ca2
-
SHA256
4d5afd332c17e7ea41f2dab72eacd61ebadd8577330acc24c652a73a32c32725
-
SHA512
c2eafe60b9509da1a3cbbedf147623ebccb50fd961ad026493387ee7daa1b90e198c9100596b57603351ac216b84de8ee78556c8e0ffb2287f2da4751102a3cf
-
SSDEEP
12288:so76koe97+7dKFtM5cn4GPEWKn11O/SoYW64fmZTChUtBm8sgZ0uQWih0KoQVZ:3GBC+7oFtMGn4GPqjO/dkChUt88sukWc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 37257c444fe9108b12942f54c3e2f1b5
Files
-
37257c444fe9108b12942f54c3e2f1b5.dll windows:5 windows x86 arch:x86
c2d02fc98f1d75d7b9457468ec75da0e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
VirtualProtect
Sections
Size: 89KB - Virtual size: 288KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 688B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 824KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
diesthiw Size: 655KB - Virtual size: 656KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
cfoiipol Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE