?Dll2Main@@YGHPAUHINSTANCE__@@KPAX@Z
Static task
static1
Behavioral task
behavioral1
Sample
4ebe1a3b25de8ee117f73757f8fe20f3.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4ebe1a3b25de8ee117f73757f8fe20f3.dll
Resource
win10v2004-20231215-en
General
-
Target
4ebe1a3b25de8ee117f73757f8fe20f3
-
Size
12KB
-
MD5
4ebe1a3b25de8ee117f73757f8fe20f3
-
SHA1
dc6bb6003d9dbbc775c5afa5baae36756a305a5d
-
SHA256
4da9812f5a06bd649c8f4a78bb9b637cd9431bbb9259b06780392373b6655d9d
-
SHA512
c9564174d9f0e81f2f4264d9bd9cdb1481bec2ce896a5ee2c068b6ebec36d362e968b206986da0ce1330eee046f7b8b09899934cdbb9c1c003db71677aff61ea
-
SSDEEP
192:mIW/WKyphR50jGOuUZZ88Zbn1eBV+y8PqKscKeBfllsRIcm8l7jNnelR:mIW/WKchjIGOua3bUiPqjchB4+I75U
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4ebe1a3b25de8ee117f73757f8fe20f3
Files
-
4ebe1a3b25de8ee117f73757f8fe20f3.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
�vp00 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�vp01 Size: 12KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�vp02 Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE