Static task
static1
Behavioral task
behavioral1
Sample
c5100d2ad4f91ab8c5926615c6340466eff47c3403159570fd7b8241be54bcc6.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
c5100d2ad4f91ab8c5926615c6340466eff47c3403159570fd7b8241be54bcc6.dll
Resource
win10v2004-20231215-en
General
-
Target
c5100d2ad4f91ab8c5926615c6340466eff47c3403159570fd7b8241be54bcc6.zip
-
Size
27KB
-
MD5
bf6d264b8bd7cc04b8869c209aabb735
-
SHA1
760ff0cecb188c4a0c256610a043deef5b8b93fe
-
SHA256
17a89f9da7a0815b9c1b90854b9594e1e4445a3cda8e05cd6067a407e4297bb8
-
SHA512
6281c637cc4a6fef16c172af8611d254cbaa15d3b05e3005816a85022e1e1e5a8f6140bc25abd0fa2c1fb8558d5d13f1a9b5ac98bf3e7730e56eecb7f2850374
-
SSDEEP
768:N6Z7q64MVEM+TgWPHbjTAfWhNHQGwrViy4CLPtK:N6Z7q6bE/TvbXLhRQGct4GtK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/c5100d2ad4f91ab8c5926615c6340466eff47c3403159570fd7b8241be54bcc6
Files
-
c5100d2ad4f91ab8c5926615c6340466eff47c3403159570fd7b8241be54bcc6.zip.zip
Password: infected
-
c5100d2ad4f91ab8c5926615c6340466eff47c3403159570fd7b8241be54bcc6.dll windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Sections
.text Size: 45KB - Virtual size: 45KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ