input
Static task
static1
Behavioral task
behavioral1
Sample
72ccbbf83b95e92a4a9fb7dfa4d63d6c.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
72ccbbf83b95e92a4a9fb7dfa4d63d6c.dll
Resource
win10v2004-20231215-en
General
-
Target
72ccbbf83b95e92a4a9fb7dfa4d63d6c
-
Size
20KB
-
MD5
72ccbbf83b95e92a4a9fb7dfa4d63d6c
-
SHA1
bcdc5f736c9f6747bb981dc24ec6c84500718e13
-
SHA256
c079111784c53dbc16aee9e1cdcd2995260ddff6a20b931d4e58424b661f57ed
-
SHA512
303acae48e237cd9a4cc7692fdb12b111c0335b3bdff3792b5e46cb3417760be7fa90f88d725577b1c7425a2aa314062036aa30ed54bdbad27c2d3e146bab3a0
-
SSDEEP
384:zNiR2LVoGmz2iJcNCM3V4jnJFp/ql/0ZvhgQ35UdxloVaY:zVL5620MFana0ZvhgQ3inl+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 72ccbbf83b95e92a4a9fb7dfa4d63d6c
Files
-
72ccbbf83b95e92a4a9fb7dfa4d63d6c.dll windows:4 windows x86 arch:x86
6f8e77940284bde3f31b3832dc439c36
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
msvcrt
_strlwr
Exports
Exports
Sections
.text Size: 16KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE