Static task
static1
Behavioral task
behavioral1
Sample
3fc70c207248b3d70339ba5ec2c3f288.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
3fc70c207248b3d70339ba5ec2c3f288.dll
Resource
win10v2004-20231215-en
General
-
Target
3fc70c207248b3d70339ba5ec2c3f288
-
Size
269KB
-
MD5
3fc70c207248b3d70339ba5ec2c3f288
-
SHA1
da409aa7331e1c2d6119bd2a7aae3f5ab0dd0ec4
-
SHA256
748f05a61b182ddacf21ea5d0e8fa69c9205f6cafb7d48ad89704a057ce92d11
-
SHA512
1627882e46e410c17c1f1eace95b7adeafd5feee99e160b9e1c83b4defec3b979c0ac99e396b6b9d832bd3190fd01bbf32975b97dcf9bfd482693df8a7a8f448
-
SSDEEP
6144:XHmcyCPs0eIVlDxzDRO5Rb8L07tHsf7kT3qa0R41hZqwHT:XN9t95ORJ/p0R45q2T
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3fc70c207248b3d70339ba5ec2c3f288
Files
-
3fc70c207248b3d70339ba5ec2c3f288.dll windows:4 windows x86 arch:x86
fc06eb9a92b8aeebe96ea69de48d91c4
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
EnumResourceTypesA
ExitThread
ReadFile
EnterCriticalSection
Sections
.text Size: 21KB - Virtual size: 404KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 243KB - Virtual size: 244KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ