gunnima
Static task
static1
Behavioral task
behavioral1
Sample
895bfae6f1454efe8a651d529b272aa4.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
895bfae6f1454efe8a651d529b272aa4.dll
Resource
win10v2004-20231222-en
General
-
Target
895bfae6f1454efe8a651d529b272aa4
-
Size
243KB
-
MD5
895bfae6f1454efe8a651d529b272aa4
-
SHA1
4a4e2ff8865775869f6f7d5c72432847377e49c9
-
SHA256
6199bb6faa200477f917addcc6e59078605318c78c1d2127871c68dca63f838c
-
SHA512
870d0d7aa23fa309a8c3ef8bd1f57658d5805829ab57f05e3bbfa32686116796bded73652aec9572eeaadc7d4e6e4679d9d70d56bb889f8cad6b2e558572c3af
-
SSDEEP
6144:upvpSbo1++ecV6e9nsHL3DQ+uF02eAMqOU5j8wTKa42FaRiL8gf:upBSEwAwedkklF00M+4w5LFeyD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 895bfae6f1454efe8a651d529b272aa4
Files
-
895bfae6f1454efe8a651d529b272aa4.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
.nsp0 Size: - Virtual size: 292KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 242KB - Virtual size: 244KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE