proc1
Static task
static1
Behavioral task
behavioral1
Sample
5070a1210c16c994dd5fbb42b966ffbc.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
5070a1210c16c994dd5fbb42b966ffbc.dll
Resource
win10v2004-20231222-en
General
-
Target
5070a1210c16c994dd5fbb42b966ffbc
-
Size
248KB
-
MD5
5070a1210c16c994dd5fbb42b966ffbc
-
SHA1
daf761f91354af3a46c5337f822d4c6c979277da
-
SHA256
d2a9fb96cc5dce7449148b7f312eb50b1b6e14a952194508b70d45c415cbec1a
-
SHA512
0fc5892dcef773aa1f380e8ace93447608c2e59ad0e85ca57486e098c1bc43e4a049a84b05a2a143b292af9e7a2842aea70470df3ab1f667a7642862f874ef12
-
SSDEEP
768:xTpifZOEKOLeYVNhZYKU8iIiuIxlx4M0K4xgTD3G+AOIa1Wglq2PsY/kNX2zhrww:xTuD96KUtxojLeDG+PRx0NX294z90
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5070a1210c16c994dd5fbb42b966ffbc
Files
-
5070a1210c16c994dd5fbb42b966ffbc.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
.Upack Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 212KB - Virtual size: 212KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE