Static task
static1
Behavioral task
behavioral1
Sample
4a02496bca24382a18be971295a5661a.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4a02496bca24382a18be971295a5661a.dll
Resource
win10v2004-20231215-en
General
-
Target
4a02496bca24382a18be971295a5661a
-
Size
13KB
-
MD5
4a02496bca24382a18be971295a5661a
-
SHA1
223567589e9e3f5f0338b60b5f69626ff1ae0492
-
SHA256
3c1e1e08e6d1ec76df02155b1a4c09e7f8baac592061551d858dd09e6bb40597
-
SHA512
ccf9f5e5f139647c4f28349355e217f75af65f7dd23139b1055b87f03ba05045214171aaf3cc70863ddcbc02a781857e251e1f8716d459330dfd9b50a0e21781
-
SSDEEP
192:UDVf8XJCe2Zjs0/uA/OHExgbTN+wzBKHW5lQ/vkQvvnyuh5ETpHAMyIGH:UDVE8Zjs04RTNTJQnlh5ExAMI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4a02496bca24382a18be971295a5661a
Files
-
4a02496bca24382a18be971295a5661a.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 60B - Virtual size: 404KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 716B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ