EcInit
Static task
static1
Behavioral task
behavioral1
Sample
635ca5e465d76f2739af50ca3a8275d3.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
635ca5e465d76f2739af50ca3a8275d3.dll
Resource
win10v2004-20231215-en
General
-
Target
635ca5e465d76f2739af50ca3a8275d3
-
Size
1.4MB
-
MD5
635ca5e465d76f2739af50ca3a8275d3
-
SHA1
aa532eb9688afaf12ff45af626bd633b913ec368
-
SHA256
be0cb3581b64a1a256757938138df895157cddf1ea9328f6568c9a634f4a9d67
-
SHA512
65b478b244f8d7085e18342f4f9c47a2646d2764e8df4c7ee7feefae68f187ccbab1be2a70f7d1578d096fa30a9c1772185b1f187401ab851624a6ebaac36aae
-
SSDEEP
24576:bFnbUUfj8cuF5LITrX2WymEivxKzktr7heUHQ3UFaz7HkTas:brfjEjLITz25mYzkl7hI/z7HAa
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 635ca5e465d76f2739af50ca3a8275d3
Files
-
635ca5e465d76f2739af50ca3a8275d3.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
.xlcie Size: - Virtual size: 254KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.divxcu Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.dfzr Size: - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ynad Size: - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.zoif Size: 548KB - Virtual size: 576KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.ilozhm Size: 52KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.klfn Size: 112KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.cemy Size: 4KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.fkdulw Size: 36KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.cxhnk Size: 656KB - Virtual size: 704KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rgnp Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ