Static task
static1
Behavioral task
behavioral1
Sample
4c1797ae8d7b639723ead59a0cad884a.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4c1797ae8d7b639723ead59a0cad884a.dll
Resource
win10v2004-20231222-en
General
-
Target
4c1797ae8d7b639723ead59a0cad884a
-
Size
13KB
-
MD5
4c1797ae8d7b639723ead59a0cad884a
-
SHA1
222ac15ee677bc9c0eb4f52c1de1f9887fb7cbd9
-
SHA256
65d29f6a9c526ed23aab0a6f5ad72633ea8712bf63a8dad38e7b6a8b190a38f7
-
SHA512
28824df02eee4500bf99cbad30aef45138bc490b79cb27abfa3bf737b9553ea43df075c1685262249c6c6272962ceb276e88bdc19e418bd8563096a05b96adfb
-
SSDEEP
384:ZGo/K6i7Zt8c2aso+YxSfVk2EXer4pG8C3ur2XutzP4e:ZGoySaso+Mb2EXeUHCy0iLb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4c1797ae8d7b639723ead59a0cad884a
Files
-
4c1797ae8d7b639723ead59a0cad884a.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.Upack Size: - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE