Static task
static1
Behavioral task
behavioral1
Sample
3e1adf14706a1486ebd4c6df89d4ffaa.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
3e1adf14706a1486ebd4c6df89d4ffaa.dll
Resource
win10v2004-20231222-en
General
-
Target
3e1adf14706a1486ebd4c6df89d4ffaa
-
Size
126KB
-
MD5
3e1adf14706a1486ebd4c6df89d4ffaa
-
SHA1
5a617883e9f2bd61017627e5567d5873009a5173
-
SHA256
105c01c5c07ffd973a78617d3506324279a260150668eeeaab40debd1e386eda
-
SHA512
fe611803ab04292b41293ede6f72fc6844696925823f7719d58ed98d8597ec930c4250d9477bdf774f874cbf8b1de3ac44ccc72265d1e718874e88e48a8a163b
-
SSDEEP
1536:V+s+8e7kphdbRHUyDBZ6oR8DvzIPQsO/V4MbYZDhPSG:ksZ8Ohh6y9Z58b8PQbKFZAG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3e1adf14706a1486ebd4c6df89d4ffaa
Files
-
3e1adf14706a1486ebd4c6df89d4ffaa.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
Size: 64KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 64KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 50KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ