Static task
static1
Behavioral task
behavioral1
Sample
39621acc7aee5df1faff5495de41935e.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
39621acc7aee5df1faff5495de41935e.dll
Resource
win10v2004-20231215-en
General
-
Target
39621acc7aee5df1faff5495de41935e
-
Size
30KB
-
MD5
39621acc7aee5df1faff5495de41935e
-
SHA1
80e4bc620f7a2ed19bec029f6684c1fb231ab7c3
-
SHA256
959e8a1636227255735b0a70f1d00664bc09977904a2208b9f2ba85c466478be
-
SHA512
9f004fbfde73f9a66d47cc50536333ef45d6cb8baee05aede49731303bf12e0c09e45340df242e3f1d582ece1e5928c3ff5a9aa83627a2b3fa6dd9d200d90f50
-
SSDEEP
768:WtX1KoqsAfPJA5ikaxu3pLNd3Sj4Diun/:W2UWP6okaxYLHSsDiu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 39621acc7aee5df1faff5495de41935e
Files
-
39621acc7aee5df1faff5495de41935e.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
wypelvi Size: - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
zmq Size: 29KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
4sbii Size: 588B - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE