Static task
static1
Behavioral task
behavioral1
Sample
49a47a291996f3fe62fbe7668e230b1d.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
49a47a291996f3fe62fbe7668e230b1d.dll
Resource
win10v2004-20231215-en
General
-
Target
49a47a291996f3fe62fbe7668e230b1d
-
Size
26KB
-
MD5
49a47a291996f3fe62fbe7668e230b1d
-
SHA1
67de989302dca0c40d4d247b645d8d766dfb1908
-
SHA256
a1704037127d4f1e4e226b43821f5cdff059d4f2b2ffda2d31f5eb1a56233284
-
SHA512
25cd3e8ab1ca33592fbd29efce3559034facf54caf77231c5afa3c0d7ed06634a73b757dd00d676178c3139afe9ebd476858f379cf2931b7b7981413d6a1c88e
-
SSDEEP
384:FYLb+BVBAiV6LMN5G4mrG2USya7d1X0u4CW+mLTNX0rBpw/M1UDiXsiu45ma8D8p:lVBAiQYN5xmrESwMFXmDici4X87BGb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 49a47a291996f3fe62fbe7668e230b1d
Files
-
49a47a291996f3fe62fbe7668e230b1d.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
Size: - Virtual size: 48KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 25KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
d Size: 713B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE