Static task
static1
Behavioral task
behavioral1
Sample
7551eef8d6bed9f0c121f2d8e03b191c.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
7551eef8d6bed9f0c121f2d8e03b191c.dll
Resource
win10v2004-20231215-en
General
-
Target
7551eef8d6bed9f0c121f2d8e03b191c
-
Size
82KB
-
MD5
7551eef8d6bed9f0c121f2d8e03b191c
-
SHA1
fa606b00a0d43b9759eb24b2ee7340a33500bf7d
-
SHA256
6b0be647ee26bb6ee336975954def0a9c6cb9ca8cd40f7625fe439c991063ca5
-
SHA512
e5d6df044f1905eab89b89a816cff4a3ecf0df0d1c1be4c5199b5f3731f70e6c3658319544f6cae8cf32d687c64705fd1b1e1cb1a36364febed2fad15338e320
-
SSDEEP
1536:pKNyEMqwL836EWWrSYEFzInRUmuOTdUe2iHdVnCuE/c1PbBR:ANwL83sW3GUnbdsmkuE/ctL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7551eef8d6bed9f0c121f2d8e03b191c
Files
-
7551eef8d6bed9f0c121f2d8e03b191c.dll windows:4 windows x86 arch:x86
d107b47a6994fe2d14e9e2821296c08c
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GetFileSize
UnmapViewOfFile
WriteFile
lstrcatA
lstrlenA
ExitProcess
Sections
.sforce3 Size: 25KB - Virtual size: 84KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RDATA Size: 52KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sforce3 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.brick Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ