Static task
static1
Behavioral task
behavioral1
Sample
7febe296d639208fec1c4a5fa87d7783.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
7febe296d639208fec1c4a5fa87d7783.dll
Resource
win10v2004-20231215-en
General
-
Target
7febe296d639208fec1c4a5fa87d7783
-
Size
68KB
-
MD5
7febe296d639208fec1c4a5fa87d7783
-
SHA1
89e084b41e17ef815cba13fd73e20f6300b19929
-
SHA256
3b4c41f4c1caf8439ca4e330f33d65085f271ae4754d6c0e84e29c525059fedd
-
SHA512
028f17c299fe7011fa22fd069de5b4c723b838adbf788f0cc08784674b7a4719f739b5f0e8a265ca98105b8be06b4c4873f66c23f8881bd1a41413d3ad68d560
-
SSDEEP
1536:uxQ5eSXr3Nc3Hw7cvmHQT0IQ7RbvIthu1YOn:BeslYvAd2huLn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7febe296d639208fec1c4a5fa87d7783
Files
-
7febe296d639208fec1c4a5fa87d7783.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
xz Size: 3KB - Virtual size: 80KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
qvkh Size: 50KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
atdkak Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE