Static task
static1
Behavioral task
behavioral1
Sample
4892c1e1c31c655dd7acf0d196373b55.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4892c1e1c31c655dd7acf0d196373b55.dll
Resource
win10v2004-20231215-en
General
-
Target
4892c1e1c31c655dd7acf0d196373b55
-
Size
30KB
-
MD5
4892c1e1c31c655dd7acf0d196373b55
-
SHA1
845f8a859c235dbee08f48c2ad915b923682a1a8
-
SHA256
a368f7d3acd82f3c8e21b1040702e9c3aaf06d94925a1238b18279d6fa1156f4
-
SHA512
e588d9656eeb38ca2cb609cae4da2352bae505d3b82350e8327b5c8a12cae336adeb9d4c240e7333186174de3f95085e6508e695746a99ecdeb1b645b510641e
-
SSDEEP
768:IJrHNYjLnv2rkMmcUoFrhmLzon5rUBjw9xY:IJrHNY3v2rkMmVchm2NU4y
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4892c1e1c31c655dd7acf0d196373b55
Files
-
4892c1e1c31c655dd7acf0d196373b55.dll windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ