Static task
static1
Behavioral task
behavioral1
Sample
a5cf6da6690859ea6cba6c1b466d8a47aff33df28f852106ec37eaf94822be60.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
a5cf6da6690859ea6cba6c1b466d8a47aff33df28f852106ec37eaf94822be60.dll
Resource
win10v2004-20231215-en
General
-
Target
a5cf6da6690859ea6cba6c1b466d8a47aff33df28f852106ec37eaf94822be60
-
Size
1.2MB
-
MD5
31eae9fbef06c3b34a06a09453032b36
-
SHA1
e4a4e5da523876f0f613f7051f45ddcbad454cca
-
SHA256
a5cf6da6690859ea6cba6c1b466d8a47aff33df28f852106ec37eaf94822be60
-
SHA512
809f5a0f01dd716023d468f89531074792306f09cdae1a0fee517c5952f04d625f17cc0a6c28eba85e9f74049608d9e725764fc0f2f782c99cae3dafb00f2c23
-
SSDEEP
6144:7zycs/si3D7bzaCtiwhwh8RljJCjshgnMnOQSfvzY6OMEP98nZxZqYBnklhMmBW2:7OBbzaCdjRQrN+AxkENmQaj
Malware Config
Signatures
Files
-
a5cf6da6690859ea6cba6c1b466d8a47aff33df28f852106ec37eaf94822be60.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Code Sign
ac:ce:e7:56:cf:9a:f4:41Certificate
IssuerCN=THEMIS LDA,O=Themis - soluäes inform ticas\, lda,L=Porto,ST=Porto,C=PT,1.2.840.113549.1.9.1=#0c0f676572616c407468656d69732e7074Not Before08/06/2018, 13:39Not After15/05/2118, 13:39SubjectCN=THEMIS LDA,O=Themis - soluäes inform ticas\, lda,L=Porto,ST=Porto,C=PT,1.2.840.113549.1.9.1=#0c0f676572616c407468656d69732e707462:1e:ec:11:85:f2:a0:fd:ab:1b:b9:5b:d7:e4:a2:a3:7e:72:d9:39Signer
Actual PE Digest62:1e:ec:11:85:f2:a0:fd:ab:1b:b9:5b:d7:e4:a2:a3:7e:72:d9:39Digest Algorithmsha1PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ