Static task
static1
Behavioral task
behavioral1
Sample
4feb58db0669f798324dd8085662373d.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
4feb58db0669f798324dd8085662373d.dll
Resource
win10v2004-20231215-en
General
-
Target
4feb58db0669f798324dd8085662373d
-
Size
17KB
-
MD5
4feb58db0669f798324dd8085662373d
-
SHA1
baa2be77cfb0f45906d0f32c320613eb89975fe8
-
SHA256
7f97005c2f089eca9781bbb3239a07316e96a3c706be3b2d1c1cb94b861b7742
-
SHA512
19a2fcc42d339b97d2039cca738d2502aba72a02e8590dad84bc685eb15bc183d3c8f0c44356316e26f19dfb858a3f39b7bb096826308dbe0443eeabed49addc
-
SSDEEP
384:gR1g3jf+P6A6i4Fer/s/bW3fzpMVFIxCSxkdwa67s1RQun80JW1pq:q1CW6A6ALsczRYSxg1RLnZJWjq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4feb58db0669f798324dd8085662373d
Files
-
4feb58db0669f798324dd8085662373d.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
dfgh0 Size: - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
dfgh1 Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
dfgh2 Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE