Static task
static1
Behavioral task
behavioral1
Sample
ea7dee0b5684e128a71c8d9dec5014ed900cc031a9e879bba8679303e13baed1.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
ea7dee0b5684e128a71c8d9dec5014ed900cc031a9e879bba8679303e13baed1.dll
Resource
win10v2004-20231222-en
General
-
Target
ea7dee0b5684e128a71c8d9dec5014ed900cc031a9e879bba8679303e13baed1
-
Size
14KB
-
MD5
13370216c8cb7ed1eabfb5d9cebf6c43
-
SHA1
4acaf501983cbf9bc7695d023481acf424d3c479
-
SHA256
5be5341c266020169a5535674807b1453e83114875f69516f80fdb18768cdc45
-
SHA512
a6bc6b55eb5f716e602fae36a3d3b37917ad9154634a3f9842fd5f27e0afc9e0b6f26e56b110b6ff5782b6552a3cf948d63c8312f0773733d9f4231dfedc0d98
-
SSDEEP
384:XJlh/rUPAoczFsznWKOB8yqmUvkxn8/Nq:5bUaoTryNn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ea7dee0b5684e128a71c8d9dec5014ed900cc031a9e879bba8679303e13baed1
Files
-
ea7dee0b5684e128a71c8d9dec5014ed900cc031a9e879bba8679303e13baed1.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 788B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ