start
Static task
static1
Behavioral task
behavioral1
Sample
47a1ab612570c59c0b8ae6d28d68f298.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
47a1ab612570c59c0b8ae6d28d68f298.dll
Resource
win10v2004-20231222-en
General
-
Target
47a1ab612570c59c0b8ae6d28d68f298
-
Size
22KB
-
MD5
47a1ab612570c59c0b8ae6d28d68f298
-
SHA1
7213379714bf197e3868bc164bdca89d63f3f7ff
-
SHA256
456b69ae3b7349cc3b86ebf42fb34c2aa8827b6205437ba8a121580edaa4903a
-
SHA512
1d957a9e6a78b0a63cc297f1a984b5342145c8704abf6ede1eb97f6103015e1ba580d96d89e050a5ac71ab72087c22c871d713d59d42a9a2ee7d180671bd99e7
-
SSDEEP
384:aPbQPWz3E5+yiVtI89QXUdM7sziLsCCgwmDWL4Fjj6xAAzIjjm:adDI8yE67s6Ygl5KSj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 47a1ab612570c59c0b8ae6d28d68f298
Files
-
47a1ab612570c59c0b8ae6d28d68f298.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Exports
Exports
Sections
CODE Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 512B - Virtual size: 176B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 1KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 512B - Virtual size: 66B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ