Static task
static1
Behavioral task
behavioral1
Sample
572a7ed1e55d465d11b9a2185dfee8a9.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
572a7ed1e55d465d11b9a2185dfee8a9.dll
Resource
win10v2004-20231215-en
General
-
Target
572a7ed1e55d465d11b9a2185dfee8a9
-
Size
83KB
-
MD5
572a7ed1e55d465d11b9a2185dfee8a9
-
SHA1
5e49a182d7140031e74e0c4f4eb7235dc98d79cc
-
SHA256
b569c94faab6ded1796f477ebb22eabfacc142dccb2f23a143760dbafd63349b
-
SHA512
2b3d4b64b5fbbdea0f1af2ae823b0c7e8f45d100f29327d8c8678b87663c449b81f7d89e16a368cf9d35afdbd55b6346ba08ac1c9dd94aee00d14d51aa6d42c8
-
SSDEEP
1536:IulpElMRMCa/I+tiv8soZNzA19SIiFCATfz8KjKbX4sU0B6Q+:IepIC6I+tiv8sKNzAGIiFCwAKjkX4sC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 572a7ed1e55d465d11b9a2185dfee8a9
Files
-
572a7ed1e55d465d11b9a2185dfee8a9.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 4KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 58KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE