zyd16
Static task
static1
Behavioral task
behavioral1
Sample
8af22d1cc7e4232280165dc08f8bc42c.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
8af22d1cc7e4232280165dc08f8bc42c.dll
Resource
win10v2004-20231215-en
General
-
Target
8af22d1cc7e4232280165dc08f8bc42c
-
Size
29KB
-
MD5
8af22d1cc7e4232280165dc08f8bc42c
-
SHA1
fc38e882c19749462aa92e718e008abd813a2646
-
SHA256
5bc944bdebe5179de3213ad1dd3dc9a3c2cdfa804b53be64d2038bb8a6bb7770
-
SHA512
d181fbab2c46f1727ceb56f0a0e9d7a397b61f7226291ac7665d7d3d804f385a6be29c2a0118f468277826f8d92364c686dabb4e83913fc4e007160d4f901f76
-
SSDEEP
384:x5yuzmk3ySFy81TvV5OFP9X30WkOAYoMVX+QbK+h/TAHMiTk11q1h1Zj1p31SyrI:lM81TvV5gZ30WoS3h/gH81qkGsKB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8af22d1cc7e4232280165dc08f8bc42c
Files
-
8af22d1cc7e4232280165dc08f8bc42c.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Exports
Exports
Sections
CODE Size: 23KB - Virtual size: 22KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 512B - Virtual size: 180B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 1KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 512B - Virtual size: 68B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ