Static task
static1
Behavioral task
behavioral1
Sample
48ecb3f48ff291c03f7df59f4dfc5a0b.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
48ecb3f48ff291c03f7df59f4dfc5a0b.dll
Resource
win10v2004-20231222-en
General
-
Target
48ecb3f48ff291c03f7df59f4dfc5a0b
-
Size
314KB
-
MD5
48ecb3f48ff291c03f7df59f4dfc5a0b
-
SHA1
92c6bdff0d404300b66fdd63466705176010875b
-
SHA256
6cb421adfc12bd3806e6914064c35fc9c6c73366266f3bb9b8b6a2785810c8c0
-
SHA512
1cb7dd3a7f7df103b9d4c74f533a5571974b74608fafd47a4843fabe4b0adab31317d3468e0f9518baa0134a8b62f05d0416c02563f3c92ae5928a7be880690a
-
SSDEEP
6144:3iY1oHcrg8FxebsUlFhbHaNcRdhUVwZx+AvP1EUfXykYCs1uKgTPu35+obqqv:3tW8rDEw6hHRdhUVgHFVHsgZW35+6qqv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 48ecb3f48ff291c03f7df59f4dfc5a0b
Files
-
48ecb3f48ff291c03f7df59f4dfc5a0b.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
BSS Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 53KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 49KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 197KB - Virtual size: 500KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE