Static task
static1
Behavioral task
behavioral1
Sample
5a0f66094bdfcbd98011ada322cff20d.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
5a0f66094bdfcbd98011ada322cff20d.dll
Resource
win10v2004-20231215-en
General
-
Target
5a0f66094bdfcbd98011ada322cff20d
-
Size
48KB
-
MD5
5a0f66094bdfcbd98011ada322cff20d
-
SHA1
8dab11fe0eb2e32997e00a833773e956d8fe8a19
-
SHA256
e48042f98fa75c9ec8c7ed75c4b270f3d2960a76ba8ac15385228fd9e544b2b6
-
SHA512
bc44b8338402f6e280c05340be3350081ae8c62b4a00d758f3da6282cb0dd861fcbe9b084553833c8ffda230c285104b242fe758ffbb71ed0f708ae1e413c6b3
-
SSDEEP
1536:5uDVMHAZECbCKg8U04v3mt11vrQrp4ejQFvltk:5QzuKMv3gvMJcFNW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5a0f66094bdfcbd98011ada322cff20d
Files
-
5a0f66094bdfcbd98011ada322cff20d.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 36KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE