?Dll2Main@@YGHPAUHINSTANCE__@@KPAX@Z
Static task
static1
Behavioral task
behavioral1
Sample
488c496b23b8b721233237a429bab52c.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
488c496b23b8b721233237a429bab52c.dll
Resource
win10v2004-20231215-en
General
-
Target
488c496b23b8b721233237a429bab52c
-
Size
14KB
-
MD5
488c496b23b8b721233237a429bab52c
-
SHA1
d7368761418cd1ce0e412c57ce3f2ae9a776096b
-
SHA256
372a94c212aa648bcbe4a51f2ea659b1aee99c89fc75ab1cc035301e3080f98c
-
SHA512
7781318e9164965d08b4a8b609943edfd7cee98a81d8eba63f963841cd9e40176ab56953bbf074747a9e5935c8980d58c294450479993f3d689e817a461d2432
-
SSDEEP
384:mPW/WPMGOuxVqadP07OgiLGBjwmVs0XXwybfkEMG6C:5QldP07mQjdubyjl6C
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 488c496b23b8b721233237a429bab52c
Files
-
488c496b23b8b721233237a429bab52c.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
�i�0 Size: - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�i�1 Size: 13KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�i�2 Size: - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE