Static task
static1
Behavioral task
behavioral1
Sample
6352dc270ce34901a095ea27601978ae.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
6352dc270ce34901a095ea27601978ae.dll
Resource
win10v2004-20231222-en
General
-
Target
6352dc270ce34901a095ea27601978ae
-
Size
167KB
-
MD5
6352dc270ce34901a095ea27601978ae
-
SHA1
8e4baad0063e17f0b7a2f4af462a2fb1cc1cf640
-
SHA256
4047ab3aa1be7760e32f91dff8b577810c78b4e546025b4ca7ef635cc9f5e009
-
SHA512
ff3869d55606f96d9dd56bd91a0f89eb47fd9de65e6a8e6050d7d2e81d368ebc5e6c58f06d2a65c5364e86ed60d4a9166d962d64f0faecbfd1336ecc1f08f62f
-
SSDEEP
3072:AcCJBU1vvERquwAswqwW5m9va0vn5jO71zZILfdlTbF1b:A21vvKewOEva0vn5q71FIDdl/F
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6352dc270ce34901a095ea27601978ae
Files
-
6352dc270ce34901a095ea27601978ae.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 165KB - Virtual size: 165KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 888B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ