Static task
static1
Behavioral task
behavioral1
Sample
4f0ed31dce0920c7a073af7d8b6e61d6.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4f0ed31dce0920c7a073af7d8b6e61d6.dll
Resource
win10v2004-20231215-en
General
-
Target
4f0ed31dce0920c7a073af7d8b6e61d6
-
Size
316KB
-
MD5
4f0ed31dce0920c7a073af7d8b6e61d6
-
SHA1
2ad849b7fa601d2afc7e4a4ea4b1b72a8aff5c5f
-
SHA256
10a3b2724831aeb451d0a60ee19c43a8852c82d657a1164459888d3f494e895a
-
SHA512
7b9c71fb43e47f0194b8875ff1ee1c08b83cab17c602626e496f5f36102798a92e4000df523063a811b8c302688b62a10be25dd0c51e6e0974b3e4a3484c8f22
-
SSDEEP
6144:ESqn30EsxZhENnLE0qGpBjRBIbYEVkVzanbqmqDfZ8hoabuv5Itv43CmX:pqnNFNnLEKpBjLe5nbqmqDSoaaR2MDX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4f0ed31dce0920c7a073af7d8b6e61d6
Files
-
4f0ed31dce0920c7a073af7d8b6e61d6.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 301KB - Virtual size: 608KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE