Static task
static1
Behavioral task
behavioral1
Sample
4821cd3616ea2366eac31d92b783875f.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4821cd3616ea2366eac31d92b783875f.dll
Resource
win10v2004-20231215-en
General
-
Target
4821cd3616ea2366eac31d92b783875f
-
Size
144KB
-
MD5
4821cd3616ea2366eac31d92b783875f
-
SHA1
ed933124b44f5f55e5a0ad6e8960504ca4b01d2a
-
SHA256
a3e4abb9248fb3029d1ba1bed7bc21781d69a5c5b2f0bc3f6664f01cc3bce0a6
-
SHA512
822e384e4b7b272931d75a27b784accac31e82f26dc54bee93ce0cf9360dadfb2a81651292a56689823e1e0fd2437b046032beefa0512a63ae13478f2b78b7e6
-
SSDEEP
1536:It6ERl10SB2YI9D2zcjSHfoM5L4t7kM4K+tCaCVAC+kiS+T7:ItJY39kfPMBT3VAC+k7+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4821cd3616ea2366eac31d92b783875f
Files
-
4821cd3616ea2366eac31d92b783875f.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 4KB - Virtual size: 152KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 63KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE