Static task
static1
Behavioral task
behavioral1
Sample
72e67a0cf2d1dd2a2a8ead28660e7841.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
72e67a0cf2d1dd2a2a8ead28660e7841.dll
Resource
win10v2004-20231215-en
General
-
Target
72e67a0cf2d1dd2a2a8ead28660e7841
-
Size
64KB
-
MD5
72e67a0cf2d1dd2a2a8ead28660e7841
-
SHA1
2751afae86c8573099ed929872fbd29338d01809
-
SHA256
e65c17fadc68e8cf0610f2a8c144b264fa813f7f72af885230aec264ec6db50d
-
SHA512
a0db8bf34f979fb35940f145e4fb1a616f1449df1493e18e0056113c7910f4d50fc8b5f3f101091a2ff2e1b9091ec5814a3ef50efbcfc76dd681997e531b06e5
-
SSDEEP
768:JhG9EHY+ZZEIpu7qCfs7f6xigfG+xE4GHrQpr9XX4NQbE+K39CCqQHGyQF9L0Q01:LG9R+Zdcfs7J+7xsNQY+K3YCyfT2JDJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 72e67a0cf2d1dd2a2a8ead28660e7841
Files
-
72e67a0cf2d1dd2a2a8ead28660e7841.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 568KB - Virtual size: 564KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 80KB - Virtual size: 77KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 832KB - Virtual size: 829KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 32KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ