Initialize
Static task
static1
Behavioral task
behavioral1
Sample
504d52acd5a774a1041891f03cf1d569.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
504d52acd5a774a1041891f03cf1d569.dll
Resource
win10v2004-20231215-en
General
-
Target
504d52acd5a774a1041891f03cf1d569
-
Size
986KB
-
MD5
504d52acd5a774a1041891f03cf1d569
-
SHA1
fefef88da8ca2b743e9aac14062aa78b7784e47f
-
SHA256
3713e382ff656a59abc71334f33c2914c397f0d53929365e5dd812043d4a5d2f
-
SHA512
ced312081bdd72074be035edd16cf7c2b3d17a3b724e452a40ede10a4f383462b005e70e0640308c0f671d50a7deaa6ae1f5867d1c87563939e3634b056a842f
-
SSDEEP
24576:V4+kopBl93itClSx+zxvhd3SUj9kAnRbnIzTrvpnHYL:V4+koJ9SklSkzpPmAnNIzTbpn4L
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 504d52acd5a774a1041891f03cf1d569
Files
-
504d52acd5a774a1041891f03cf1d569.dll windows:0 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
Size: 723KB - Virtual size: 722KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 215KB - Virtual size: 214KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 44KB - Virtual size: 143KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE