Static task
static1
Behavioral task
behavioral1
Sample
3ec065e8964ebea6c24a196e0d244c50.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
3ec065e8964ebea6c24a196e0d244c50.dll
Resource
win10v2004-20231215-en
General
-
Target
3ec065e8964ebea6c24a196e0d244c50
-
Size
83KB
-
MD5
3ec065e8964ebea6c24a196e0d244c50
-
SHA1
65ac0ef397c707f68b92cfdd186032e6d4db6f0f
-
SHA256
a0a02f6955e3cc9376208bf4c56f675bb628957412bcfd3b2e8e717210643d7e
-
SHA512
208483f1739f7b7dcdaeade838fafa841978a5d6e94686e8cb77a14aec42b7a20d3b317df7b5aedd97f0ab3fb01aed7d86a7426dc83b3089ba023b026f34496b
-
SSDEEP
1536:aEAVjPru0yBZggsWTPJzQ8U+7CgrmCajlKjDPGLH2zVU2me86LYYgXP1O:a1rqlZrsKxzTU+75SCvjDPYmweVYlXPs
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3ec065e8964ebea6c24a196e0d244c50
Files
-
3ec065e8964ebea6c24a196e0d244c50.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
CODE Size: 20KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 59KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 2KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE