Static task
static1
General
-
Target
duckware_free.dll
-
Size
180KB
-
MD5
5ef063623251968d00e2cffba5f4da54
-
SHA1
d7ddd4bb40045ed171b7633b5030d2b332c90e04
-
SHA256
4a670fb92bde727828a26b628989118c51e4444584c029e11f8b20dcfb3a8c49
-
SHA512
d3be4c898adb015dada654712fa5d5b61a04e2deda062c2714bb4132d86ce1ddfe85cedd12f11ff1d000e806db026a3d457eeb63220e3dd3574fe5ca72dd4dbc
-
SSDEEP
1536:svUtNDvfPvVL/bAt55Q0lchXD3G2Oich43KGTRpkfgbxiCe1pRgz2TfXruD18O8o:s8bvfwV7iqAtug3e1jgAfXruDmON
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource duckware_free.dll
Files
-
duckware_free.dll.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 178KB - Virtual size: 177KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 952B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ