Static task
static1
Behavioral task
behavioral1
Sample
72a010dcbeb3e6ba68fe3ec7a0a1fbd7.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
72a010dcbeb3e6ba68fe3ec7a0a1fbd7.dll
Resource
win10v2004-20231215-en
General
-
Target
72a010dcbeb3e6ba68fe3ec7a0a1fbd7
-
Size
202KB
-
MD5
72a010dcbeb3e6ba68fe3ec7a0a1fbd7
-
SHA1
412d06a2178f172311ee978b12314f939b2f64ae
-
SHA256
e4ac9b321d023ba5ae3ae721956af56f65aba0f59c23c0eae65c5363f7227455
-
SHA512
a52e3a2c290998c4a960ea93d4eb23be7a48d233156c1de0e58fa49ce15b22d89231a1d327a6319ffc8b9b8432657488ddfb9472838a868b1572dac62d112014
-
SSDEEP
3072:IB5HOvZ67MabMlMktybz6as9gUrUKkNwRgOuxXXxU5t0/vycXESlmZdwTxtorJu4:LvUBbztFrZN22xnC5SsymZCoNu5F5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 72a010dcbeb3e6ba68fe3ec7a0a1fbd7
Files
-
72a010dcbeb3e6ba68fe3ec7a0a1fbd7.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
CODE Size: 184KB - Virtual size: 184KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 1KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 3KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ