Static task
static1
Behavioral task
behavioral1
Sample
5b61f2269456c3690a1061daa810c5c3.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
5b61f2269456c3690a1061daa810c5c3.dll
Resource
win10v2004-20231222-en
General
-
Target
5b61f2269456c3690a1061daa810c5c3
-
Size
17KB
-
MD5
5b61f2269456c3690a1061daa810c5c3
-
SHA1
c35900b59f8f58067102f03241eb2b2c69fb7c1b
-
SHA256
2ade80fb962db0cc018d09d2719d60ff2bd96f0f0f01ad96917aaa8057ac4f19
-
SHA512
33baf01023080684554aff148ad34b50559b78892c92cfdc95764c1e355ff8ec289d01841db7b12228ffc41862916917b281f85e810dccda52e0d6b6fcffaca6
-
SSDEEP
384:OHC5sxmXBd03E/jnspVMzuYV1mf7Mw39sa0b0U/vQOglx1TzOjb:Oi+x0dYErqVMzuwEMwNT20U/vgFC/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5b61f2269456c3690a1061daa810c5c3
Files
-
5b61f2269456c3690a1061daa810c5c3.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.Upack Size: - Virtual size: 104KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE