Static task
static1
Behavioral task
behavioral1
Sample
64162e09256974459d3e08e9459a202c.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
64162e09256974459d3e08e9459a202c.dll
Resource
win10v2004-20231215-en
General
-
Target
64162e09256974459d3e08e9459a202c
-
Size
2KB
-
MD5
64162e09256974459d3e08e9459a202c
-
SHA1
39b786e2330c0c64fa3ec0c9e7766cf23cab5cb4
-
SHA256
78f2eb52f50ad39a0e1bad321d2f60096793ce721d0173b3d2dfafe3e309ca97
-
SHA512
584dd24a7540df7660b4fa92bb137b59ef4b59237d6e26c859bfae7fa87453150851d2a61f98b3bf01c8b2677161ca48588f8e6ed4cec149729355d969deaf27
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 64162e09256974459d3e08e9459a202c
Files
-
64162e09256974459d3e08e9459a202c.dll windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: - Virtual size: 194KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ti-zek0 Size: - Virtual size: 741KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ti-zek1 Size: 873KB - Virtual size: 873KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 272B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 434B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ