Static task
static1
Behavioral task
behavioral1
Sample
8f9b6bf5cafff2aed0aa70a48502863e.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
8f9b6bf5cafff2aed0aa70a48502863e.dll
Resource
win10v2004-20231215-en
General
-
Target
8f9b6bf5cafff2aed0aa70a48502863e
-
Size
133KB
-
MD5
8f9b6bf5cafff2aed0aa70a48502863e
-
SHA1
31deb533ed114e9c1348bde4d25886c4a7b2623b
-
SHA256
5eab3df237f2a5d86b5894f1e252c9eef0f81539626d82e385ac9a6b6ccc9dab
-
SHA512
4691ecf7dc51a5573cabc22d8e0462a8fe25aa97a56c49263ee9f89fe63b56647e92006ae59fd349542eb7788497408a9faf9ecee518cc7fe93e4836f59b0917
-
SSDEEP
3072:u+JOBUAfp+USwRcEV6StNes75k7JxIlMT2wQV81BFBUqsWg:Slf8aV+1AFV6rBU4g
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8f9b6bf5cafff2aed0aa70a48502863e
Files
-
8f9b6bf5cafff2aed0aa70a48502863e.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 194KB - Virtual size: 193KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 62KB - Virtual size: 61KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ