CreateObject
Static task
static1
Behavioral task
behavioral1
Sample
5325e5cc930cc30c6cbd40434a3b34b4.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
5325e5cc930cc30c6cbd40434a3b34b4.dll
Resource
win10v2004-20231222-en
General
-
Target
5325e5cc930cc30c6cbd40434a3b34b4
-
Size
36KB
-
MD5
5325e5cc930cc30c6cbd40434a3b34b4
-
SHA1
5ad5cccf5d7664b08c400d39ee688ae1b9f10d04
-
SHA256
caa32fdd815b604d5ce3dd955f46eeb783b18e03bee814aeee9c293dd4f0446c
-
SHA512
e18645297dc5ce884d1c3ada64f229732f5d24b2eb811ecbcbfc3816fea0d5d784d0186c917e956824ce418b9ed64f04d6c28a6599d4853cea14d669c187abc1
-
SSDEEP
768:242/o63EZiPRy5vW2mGrbNW7XmJhnaSQNipCBmM:t2/gEPc5+NGrQ7XmDn0IpCB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5325e5cc930cc30c6cbd40434a3b34b4
Files
-
5325e5cc930cc30c6cbd40434a3b34b4.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Exports
Exports
Sections
.weiwen0 Size: - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.weiwen1 Size: 35KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.weiwen2 Size: - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE