?Dll6Main@@YGHPAUHINSTANCE__@@KPAX@Z
Static task
static1
Behavioral task
behavioral1
Sample
78be288e168df4900eb0c5a460fd769a.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
78be288e168df4900eb0c5a460fd769a.dll
Resource
win10v2004-20231215-en
General
-
Target
78be288e168df4900eb0c5a460fd769a
-
Size
12KB
-
MD5
78be288e168df4900eb0c5a460fd769a
-
SHA1
fbae850d536b11ba0d6cdbb5ab1b8bde23b3545b
-
SHA256
4a9bf0566106a56dab354c144392422bdb752b1dbd3ebad63eb1db511c06621d
-
SHA512
5113e3ed939df03ef22050caa0946153cd962a6920d0d452e42adb329b578d5558e5b1f48a4c768043deea227a720f0329ebbbf0dc62c01db060c71ac028efc3
-
SSDEEP
384:mlMW/WYUFGOuqhovBmEE3lfdv4eqWSLbHm7UYY:uNCokEEVfF45i5Y
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 78be288e168df4900eb0c5a460fd769a
Files
-
78be288e168df4900eb0c5a460fd769a.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
S4�u0 Size: - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
S4�u1 Size: 12KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
S4�u2 Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE