Start
Static task
static1
Behavioral task
behavioral1
Sample
4f9085a4ac3dc89665080e04930b97d5.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4f9085a4ac3dc89665080e04930b97d5.dll
Resource
win10v2004-20231222-en
General
-
Target
4f9085a4ac3dc89665080e04930b97d5
-
Size
212KB
-
MD5
4f9085a4ac3dc89665080e04930b97d5
-
SHA1
863d66f4d125a4a3a2a0bf232135ad442729b19a
-
SHA256
19fba5f9d7cf9917b05d85a6501e38b548108ae02f8347bceed57266f9854e43
-
SHA512
36ac13f6fbece0eb21a358b74fe54acda9aec8ff7fcd76d74b7f8f6619afae293de27ef2a86cd92946f5a24a93278c31ce74cc259b7371354d4b7278268cc90c
-
SSDEEP
384:ILjhGhvBVrOj8rQbAv4oHpWjSdg/L6otVncoY+3vKm:ajhGhZVrOorQbWEjCgj7cE/h
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4f9085a4ac3dc89665080e04930b97d5
Files
-
4f9085a4ac3dc89665080e04930b97d5.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
.Upack Size: - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE