?Dll1Main@@YGHPAUHINSTANCE__@@KPAX@Z
Static task
static1
Behavioral task
behavioral1
Sample
5b6e65d070f31ddf65bc4be0874ac3af.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
5b6e65d070f31ddf65bc4be0874ac3af.dll
Resource
win10v2004-20231215-en
General
-
Target
5b6e65d070f31ddf65bc4be0874ac3af
-
Size
27KB
-
MD5
5b6e65d070f31ddf65bc4be0874ac3af
-
SHA1
62dcfcb60694f50a2f215a4a860989e42d0c7cb5
-
SHA256
997d3c19cfbe8756376177a89be89047315e280a6bff767587174fc3c923cba2
-
SHA512
92e51f77fbcfb1c5a993a99b309df84b8c6e0fccb8c62dbb5e284aaec3fd30dc10f766b7c5578e657ca644fa5fa9ad9388d9557a5c245332759c56764cac345c
-
SSDEEP
384:mtW/W5bGOugtVFoG8dIgQk0/8E/A7BO7TB46Lc7zrv9ylSw3QQJvtzJWo3njAJlz:wz98+gPoS7Q794ZzxW39JycAJlilk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5b6e65d070f31ddf65bc4be0874ac3af
Files
-
5b6e65d070f31ddf65bc4be0874ac3af.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
��u0 Size: - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
��u1 Size: 26KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
��u2 Size: - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE