mymain
Static task
static1
Behavioral task
behavioral1
Sample
3afa52bf60e960f1cb26cf0675e27cd9.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
3afa52bf60e960f1cb26cf0675e27cd9.dll
Resource
win10v2004-20231215-en
General
-
Target
3afa52bf60e960f1cb26cf0675e27cd9
-
Size
26KB
-
MD5
3afa52bf60e960f1cb26cf0675e27cd9
-
SHA1
4d11f829bfa61a64326463e2087203e157312181
-
SHA256
8fd5c07988e5f1f0e250d6d3e7034efb8eb4a065c1a1388307689f1fc92cae5c
-
SHA512
5677a28ce3b4057fad9c3c3178de26eb480a1ffcc716294693175159bd2fee10dc3b8203102a59d6357212287308fd3d2f724614c15c60868828f85acd3a304b
-
SSDEEP
384:PTgxz0C+Mgqd+1pqBQe+1ct5VDjAYg63N1H19UNqUZPQBsb4tf6UbFv89AzCp:rlC+lqdSwBQhCjvg691HcXo5b91C
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3afa52bf60e960f1cb26cf0675e27cd9
Files
-
3afa52bf60e960f1cb26cf0675e27cd9.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Exports
Exports
Sections
CODE Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 512B - Virtual size: 180B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 1KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 512B - Virtual size: 70B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ