Static task
static1
Behavioral task
behavioral1
Sample
8a79d7c3880f5050ecefe06740a9b429.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
8a79d7c3880f5050ecefe06740a9b429.dll
Resource
win10v2004-20231215-en
General
-
Target
8a79d7c3880f5050ecefe06740a9b429
-
Size
816KB
-
MD5
8a79d7c3880f5050ecefe06740a9b429
-
SHA1
de9d36c9681d189ff4ecb8ed9a760af0bd89e857
-
SHA256
3aa4682cd349be75aafb0a5ab8d65a0e92dd9e46df9b7b8f518cddb8bbd0bd2d
-
SHA512
110cd1ede85c2836af8b15967a536a70455920d7bc282251abe10633c91b833c943e474d10c9446647e43bf99a7983d2837f3cdc3575c4bce6f0065e7db6468d
-
SSDEEP
24576:p5bcg4qX8JZh+482ciZo1doSSEh77Cgpgper5KsF:p1cg4jJn+DsZeJLh/CQNbF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8a79d7c3880f5050ecefe06740a9b429
Files
-
8a79d7c3880f5050ecefe06740a9b429.dll windows:5 windows x86 arch:x86
baa93d47220682c04d92f7797d9224ce
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Sections
Size: 4KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 436B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 1012KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
yctgxlve Size: 805KB - Virtual size: 808KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
vgmegddf Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE