start
Static task
static1
Behavioral task
behavioral1
Sample
3e6be3e770eeccb36c2b72fb9e7568e8.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
3e6be3e770eeccb36c2b72fb9e7568e8.dll
Resource
win10v2004-20231215-en
General
-
Target
3e6be3e770eeccb36c2b72fb9e7568e8
-
Size
18KB
-
MD5
3e6be3e770eeccb36c2b72fb9e7568e8
-
SHA1
574cbe38c03f57222e4cf498265d81d8f356c96b
-
SHA256
035239d4785e362e13acc6f8b250d90be1dcd74ae96089d540e64a2568c76feb
-
SHA512
0f3b309d51d3f5008864d20066d3ee5a42caff55d4531e5da1e63025a194c81746dd450f1eab6d8622eb0ed2f1c4d440b45656620a6be518f8c52f47dc26dd90
-
SSDEEP
384:mRdCyfMqlW2mQmjNyTo63Eo7S4TeGqa15AzjqS:qCyUqlvmQAIb3791Dm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3e6be3e770eeccb36c2b72fb9e7568e8
Files
-
3e6be3e770eeccb36c2b72fb9e7568e8.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Exports
Exports
Sections
CODE Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 512B - Virtual size: 176B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 1KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 512B - Virtual size: 69B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 964B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ