Static task
static1
Behavioral task
behavioral1
Sample
6499ebe6ede4f996577f59e0edab30f1.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
6499ebe6ede4f996577f59e0edab30f1.dll
Resource
win10v2004-20231215-en
General
-
Target
6499ebe6ede4f996577f59e0edab30f1
-
Size
309KB
-
MD5
6499ebe6ede4f996577f59e0edab30f1
-
SHA1
81140af337af659013275277c94f5fc444efa84e
-
SHA256
1f433c579bbd4cd8ba9854d0bc4c3a2e73e783eab0e4500b3ddf077eedb1bde6
-
SHA512
467979f5828238b5169a560a5c08eebf7e060336cc751cf54feb7310270c1b32bb27cbe315aabd6ebeabb9e3ef9e604bd6f5aaf0b9e5cbd2cb65a93a4f58e6be
-
SSDEEP
6144:i+/r4gRMOu66i8aaMXsGuC/gGx03duicw1/RNNXpfiJ:P/MgRMQ3HmM03dzzbh2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6499ebe6ede4f996577f59e0edab30f1
Files
-
6499ebe6ede4f996577f59e0edab30f1.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 99KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 98KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 100KB - Virtual size: 420KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ