Static task
static1
Behavioral task
behavioral1
Sample
66ab167a31b16592e95dc45481f165b1.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
66ab167a31b16592e95dc45481f165b1.dll
Resource
win10v2004-20231215-en
General
-
Target
66ab167a31b16592e95dc45481f165b1
-
Size
154KB
-
MD5
66ab167a31b16592e95dc45481f165b1
-
SHA1
201d66424df6abbe8e23e64a7d1d5ceae07df3fc
-
SHA256
73e0c7e0de48ddd37428a06ab11154367b8569d32d36e358c34d5d21bbd85014
-
SHA512
732abb5e8ebdef81afc07ff533eed9ed049e6e3fef4931276c6b47a77da8c03ec2c7827814e8b965ae2f4d34016d6f07340ec5fdae1976ef5fb831a65e9b17ad
-
SSDEEP
3072:med6ajo0ac/Es4BYAh9w8Ocn/3pAvFI7qCSHdPLa:mU6EE0AhR/3Ovi79+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 66ab167a31b16592e95dc45481f165b1
Files
-
66ab167a31b16592e95dc45481f165b1.dll windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.petite Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE