Static task
static1
Behavioral task
behavioral1
Sample
4ff879f05d70cd9df4abea49ea6a9445.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4ff879f05d70cd9df4abea49ea6a9445.dll
Resource
win10v2004-20231222-en
General
-
Target
4ff879f05d70cd9df4abea49ea6a9445
-
Size
17KB
-
MD5
4ff879f05d70cd9df4abea49ea6a9445
-
SHA1
ea8df706deb017c3dd2f5bde291a75078d898a00
-
SHA256
4f7ddb0506e02d28806e53b9d31e7c67bba19968edf9af19468780a6632cadc0
-
SHA512
962d115a0168203f7d7040ed54295ba4be4590fbd2e9198e80ccb93d0e679c55e6524ca625cba6903f528c52fc8dc035f3ecc29f2a0dd21ff090a52a8cb5e754
-
SSDEEP
384:ceJYSpALbmwWqCq4OSlj/vw873L0oTFM3HATRGW4:ceJY8ALylc1a/73QoGAe
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4ff879f05d70cd9df4abea49ea6a9445
Files
-
4ff879f05d70cd9df4abea49ea6a9445.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 912B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ