start
Static task
static1
Behavioral task
behavioral1
Sample
48436ed3c3eb0491ee389579a15b6e9e.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
48436ed3c3eb0491ee389579a15b6e9e.dll
Resource
win10v2004-20231215-en
General
-
Target
48436ed3c3eb0491ee389579a15b6e9e
-
Size
39KB
-
MD5
48436ed3c3eb0491ee389579a15b6e9e
-
SHA1
b1068d077542749a2a773b31650b279d312a07d4
-
SHA256
a0a9247319308f6bf3bd56cd15f9a75e425b6bbcb881cbddb1651d42a5cbfb86
-
SHA512
fed479db3c7db569a23aacd450e1250dd9e102b7b1e01b45290a9ca8f035ebc482539c4c3dfa6412aa02100954278b6f903f518c83beec42d0178a63fc562172
-
SSDEEP
768:Lj2b65T1SDxfuEbNOrfq7kvT2wAAtC5GYF0thTVJEjLAg450UW60:Lj2b651SD9uEbNJpw9oF0zYAE60
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 48436ed3c3eb0491ee389579a15b6e9e
Files
-
48436ed3c3eb0491ee389579a15b6e9e.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
Size: - Virtual size: 112KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 38KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE