Static task
static1
Behavioral task
behavioral1
Sample
434667ff579441195c5fb9ad693fb0db.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
434667ff579441195c5fb9ad693fb0db.dll
Resource
win10v2004-20231215-en
General
-
Target
434667ff579441195c5fb9ad693fb0db
-
Size
353KB
-
MD5
434667ff579441195c5fb9ad693fb0db
-
SHA1
9109a6cbf16487222d043185c0873284de384ae2
-
SHA256
dc3d819e44d63d5a83ca3950f807aec52f1ad76c04434a657b54059fb2bfd143
-
SHA512
98c503c643cde09ecb3f910d86215c1f57be6c9da3b90a46ad3e1f430bbf9027320fbee6c74c9efeb25864ed9ef42616ec6f0e93c826920a9cff97e58242e2ab
-
SSDEEP
6144:+U9I63YT2Ycx2RI5fswAYscZUwyuruCZUcB/bx7AKdAQG1ttuYB3rg3d:+U9I52/Yms1AyuruC2Q/ZAKdAj1Z3r
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 434667ff579441195c5fb9ad693fb0db
Files
-
434667ff579441195c5fb9ad693fb0db.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.nsp0 Size: - Virtual size: 820KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 352KB - Virtual size: 352KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE