ServiceMain
Static task
static1
Behavioral task
behavioral1
Sample
8bb3598d60ca294bb7272f17343e9ebf.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
8bb3598d60ca294bb7272f17343e9ebf.dll
Resource
win10v2004-20231222-en
General
-
Target
8bb3598d60ca294bb7272f17343e9ebf
-
Size
342KB
-
MD5
8bb3598d60ca294bb7272f17343e9ebf
-
SHA1
2d54c0a7c3008de65960a21d0d475a228e0338df
-
SHA256
2dcce1aeb2a0b7b9984d86bcc45c2c56c5e70a10f069fe8af17090d6eef428b3
-
SHA512
dd1075469df61cb309acd4ba7f3c33ece53b0827cb9c90d6fb1557083682f6615ba40026a9ac494de7ccf9382256d8b9c01bb0852e253ce41eb6114915bc818e
-
SSDEEP
6144:U/okW9zqe+5QHOKG+zx8xg6pnkALoaxC5BcPsKomujZpt0TB7x:Ppzqp5QuJ+yRpu5KzomuB0T
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8bb3598d60ca294bb7272f17343e9ebf
Files
-
8bb3598d60ca294bb7272f17343e9ebf.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Exports
Exports
Sections
CODE Size: 283KB - Virtual size: 283KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 26KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 5KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 512B - Virtual size: 70B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ