Static task
static1
Behavioral task
behavioral1
Sample
7ebb06556b5116097e5b05595a3505ef.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
7ebb06556b5116097e5b05595a3505ef.dll
Resource
win10v2004-20231215-en
General
-
Target
7ebb06556b5116097e5b05595a3505ef
-
Size
136KB
-
MD5
7ebb06556b5116097e5b05595a3505ef
-
SHA1
44c60b69fbdcb12fd2441d6056b9dc8b8e7f09ac
-
SHA256
737cd5b5ef84c0504f9768ce283b75dc2d5617b2d9f3e3db57c5c3236b0992ac
-
SHA512
da0fd1ae37189d9af0ae586dba982994d8bb864a0da8132739308c2fa57b9c524e565818ae7e2f4a2b38c9dad2f8d799015c7c014a547912e2e2b46bb1c9ff88
-
SSDEEP
3072:LCOOe6ths2hyT0DzJfN3ZKU3YkmN5Sw4Q2kUl59Pnk:LCOOem/DzJhok45X4HPk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7ebb06556b5116097e5b05595a3505ef
Files
-
7ebb06556b5116097e5b05595a3505ef.dll windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 123KB - Virtual size: 122KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 23KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ