Static task
static1
Behavioral task
behavioral1
Sample
47b8ac26792618a97b0ca89c6152216d.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
47b8ac26792618a97b0ca89c6152216d.dll
Resource
win10v2004-20231215-en
General
-
Target
47b8ac26792618a97b0ca89c6152216d
-
Size
323KB
-
MD5
47b8ac26792618a97b0ca89c6152216d
-
SHA1
4cb963391c696568c6edfddff3a2a3a078c53091
-
SHA256
e2d5bac5eed02d7fb619ad7f4c6331af6d93c0563de703be3c6974b005cda097
-
SHA512
7c817c29466558f56bd54bface7e1c64376565e5d2eb0bd7e6b0ff6c2e291ee429433423822bed7c67333df1842ccb9c66157696d3ef287ce86b0511817f6786
-
SSDEEP
6144:/h9UzEhIyx/UdNUAMvrnDAQKOQc/bh+JjTR1kD1jqhAKWo:/hZhIkcdIDGjTsJ8tWo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 47b8ac26792618a97b0ca89c6152216d
Files
-
47b8ac26792618a97b0ca89c6152216d.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 386KB - Virtual size: 1.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 14KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE