Static task
static1
Behavioral task
behavioral1
Sample
c40fc32c6ce09d8539f11442fb1174026c9092ba777d6016194c7ffee9c6371f.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
c40fc32c6ce09d8539f11442fb1174026c9092ba777d6016194c7ffee9c6371f.dll
Resource
win10v2004-20231215-en
General
-
Target
c40fc32c6ce09d8539f11442fb1174026c9092ba777d6016194c7ffee9c6371f
-
Size
1.2MB
-
MD5
f873726c30739b713e36f747b401b7fe
-
SHA1
30d0b0956c8f0e60d1aeba2fceb3db095798f210
-
SHA256
c40fc32c6ce09d8539f11442fb1174026c9092ba777d6016194c7ffee9c6371f
-
SHA512
773db35bc61e2a576130d8337024f5242adf6090bbbaddd8d122a13a6f92beeacee7937720f9c62079b776f994091408946de8f284d24b2ca3c2f132caa82a50
-
SSDEEP
6144:qwYpyJsx3DpotI8tB/bQkGLSAYMi4kax8QtbEiK2VOQSfvzY6OMEP98nZxZqYBnh:qLd8tB/FGWSN5iMlvzPh8E/LiP
Malware Config
Signatures
Files
-
c40fc32c6ce09d8539f11442fb1174026c9092ba777d6016194c7ffee9c6371f.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Code Sign
ac:ce:e7:56:cf:9a:f4:41Certificate
IssuerCN=THEMIS LDA,O=Themis - soluäes inform ticas\, lda,L=Porto,ST=Porto,C=PT,1.2.840.113549.1.9.1=#0c0f676572616c407468656d69732e7074Not Before08/06/2018, 13:39Not After15/05/2118, 13:39SubjectCN=THEMIS LDA,O=Themis - soluäes inform ticas\, lda,L=Porto,ST=Porto,C=PT,1.2.840.113549.1.9.1=#0c0f676572616c407468656d69732e70748e:26:cf:fd:ad:33:51:89:82:0a:1f:c0:79:aa:d8:b0:c9:0f:ab:e5Signer
Actual PE Digest8e:26:cf:fd:ad:33:51:89:82:0a:1f:c0:79:aa:d8:b0:c9:0f:ab:e5Digest Algorithmsha1PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ