lashdasklhfuasiohfas
Static task
static1
Behavioral task
behavioral1
Sample
48cf9dee31946c7f94c76b6eda7c9db9.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
48cf9dee31946c7f94c76b6eda7c9db9.dll
Resource
win10v2004-20231215-en
General
-
Target
48cf9dee31946c7f94c76b6eda7c9db9
-
Size
788KB
-
MD5
48cf9dee31946c7f94c76b6eda7c9db9
-
SHA1
ecdea68e017ad2ef03b0d66a57079b757a18dbfa
-
SHA256
5151ce68030ce02778d494c0a5669d66102a4918d827371561e80d47a1cd56c5
-
SHA512
557700fd9f7ab600420b322771abc87efd46e9d9499c02e00d3df6d6f2eaeb0246a6aa0dbeb4cd85cc2238b163dad25de4c64a677e53b8569d3e57fea00a4444
-
SSDEEP
24576:/2RXR+DySAjqOt4BugfOjWcCDUiWBwrk:/IRP1t4BuyOnCDT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 48cf9dee31946c7f94c76b6eda7c9db9
Files
-
48cf9dee31946c7f94c76b6eda7c9db9.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
Size: 324KB - Virtual size: 724KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 40KB - Virtual size: 152KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 32KB - Virtual size: 360KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 12KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 956KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 364KB - Virtual size: 364KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE