Start
Static task
static1
Behavioral task
behavioral1
Sample
4b95bc42416d188ce2a1fd3b2f576701.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4b95bc42416d188ce2a1fd3b2f576701.dll
Resource
win10v2004-20231215-en
General
-
Target
4b95bc42416d188ce2a1fd3b2f576701
-
Size
12KB
-
MD5
4b95bc42416d188ce2a1fd3b2f576701
-
SHA1
db17e3d1cc731cf479c69ff71176c121f6644510
-
SHA256
d539309732d14a0d1d660684b2c01e7647ace8fa035fdd1ecfb2bd1f582bb19d
-
SHA512
83c36b1a94dc97c08fa505180fe1ba0b1796fc2893c5b682de1daad730dd95e21156a7c46da1d4593f23dcdbc7f6fb4fbd609c516ea35054482a2e1e654bff42
-
SSDEEP
192:yQS+gJJNFWIQ41eLj/JlgKMBAXHe8sH3nZ6+oKgL0G12KYSQd8HsWfD0X74slkgs:y3+gLrt0A/Aub3nYqgLz2lxG7hsKB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4b95bc42416d188ce2a1fd3b2f576701
Files
-
4b95bc42416d188ce2a1fd3b2f576701.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
.Upack Size: - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE