Static task
static1
Behavioral task
behavioral1
Sample
65727fc1e85de794bad03c68961058e4.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
65727fc1e85de794bad03c68961058e4.dll
Resource
win10v2004-20231215-en
General
-
Target
65727fc1e85de794bad03c68961058e4
-
Size
38KB
-
MD5
65727fc1e85de794bad03c68961058e4
-
SHA1
8e15d3ec86cd21726001a88866ac8ceceaa19ebf
-
SHA256
dd5a5f923f11343c9c806ce23981025de57ff8376b0bd3eb62f6d36f11ad4b26
-
SHA512
913ec6fa70551c385b644e84fa070da4d9e8f9536cc6853e13d95cfbd99c7b9b321b859e41547172afbf489ba6c039916550873a1b8a3df48ca59c2e1b4847e0
-
SSDEEP
768:fvl0ePXZE3+geq30WsRLnLkncGjdcgDCw2cRE:fvlzP+37e0pkrYnBJ7ycRE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 65727fc1e85de794bad03c68961058e4
Files
-
65727fc1e85de794bad03c68961058e4.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
Size: 204KB - Virtual size: 600KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 52KB - Virtual size: 105KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 744KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
jrsyhtlh Size: 576KB - Virtual size: 576KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
nfmhdzoe Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
nfmhdzoe Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE