input
Static task
static1
Behavioral task
behavioral1
Sample
4a9e3a8ed94f477432a654ecf8690656.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4a9e3a8ed94f477432a654ecf8690656.dll
Resource
win10v2004-20231215-en
General
-
Target
4a9e3a8ed94f477432a654ecf8690656
-
Size
17KB
-
MD5
4a9e3a8ed94f477432a654ecf8690656
-
SHA1
70c5449db41993dd8cc7f9412ba2bb7ed867d99f
-
SHA256
9d48173be1746b604cb587b1847c2e896ee18c6728bda02e842d8940d91e83f1
-
SHA512
661739fb762c0e59bc3cf15baed2903a755a37cad956fe3cc7bc36379f0ba02d769c470420e9336170fa6ac0cc3f894699eacc8fab1936340e6634238eb21a06
-
SSDEEP
384:OCVGbdN4GisYwDvNQKIofxS8yj424N0O:OCudaQYwDvNQPq24S
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4a9e3a8ed94f477432a654ecf8690656
Files
-
4a9e3a8ed94f477432a654ecf8690656.dll windows:4 windows x86 arch:x86
9951ed9cbd1ac28af7ef1eef107f61ed
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
ws2_32
WSAStartup
advapi32
InitializeSecurityDescriptor
msvcrt
_strdup
Exports
Exports
Sections
.text Size: 13KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE