Static task
static1
Behavioral task
behavioral1
Sample
44a71a07f5f5323e28cf9b08fd4c8e49.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
44a71a07f5f5323e28cf9b08fd4c8e49.dll
Resource
win10v2004-20231215-en
General
-
Target
44a71a07f5f5323e28cf9b08fd4c8e49
-
Size
22KB
-
MD5
44a71a07f5f5323e28cf9b08fd4c8e49
-
SHA1
dee2dce197806690884e58ef3c4d9fe09eaaf4bb
-
SHA256
2a68d3c8a2c84f70f68fa99df0cc860b6a10d2078f9ccfbe833f0e30032195dc
-
SHA512
244f8876203f6d575f3135bbd21dca866a505f2c190a8c5e6d352300979aa4a6964549b1fe93fadefcd76510ea8ec0baca719f51679f49b5abecbebccf92552d
-
SSDEEP
384:Cmh94mDpjdm/fTBrZSCa4PVlptE976kHACAjI49BGsUJWpimzzYD:C69vDazvSCz9tM76LCcd9BuSiys
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 44a71a07f5f5323e28cf9b08fd4c8e49
Files
-
44a71a07f5f5323e28cf9b08fd4c8e49.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
�<6092 Size: - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�kv#146 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
xbb2 Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE