Static task
static1
Behavioral task
behavioral1
Sample
8facb8b2944a38fc0080732bd4fca04e.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
8facb8b2944a38fc0080732bd4fca04e.dll
Resource
win10v2004-20231215-en
General
-
Target
8facb8b2944a38fc0080732bd4fca04e
-
Size
56KB
-
MD5
8facb8b2944a38fc0080732bd4fca04e
-
SHA1
9acf0a6ce86bc0e5adea87df3495d02ddfccbb71
-
SHA256
07046818acc6f0e9f460d8103ee6a9b9d89d7ec6524319ca4173703eb2ffaf27
-
SHA512
38d2942b1305fae71a404327a068eaa825c362493006ef41d18e025f8724d3a305af32faa4716ff2b2f5b80bd56cf846cdfd05179af0342575edf9ddcfd12308
-
SSDEEP
1536:cosh8v7a1fqe48fS1Ny8KTnkYGSCOp88MN0fYA:cbcd15aGwre0fYA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8facb8b2944a38fc0080732bd4fca04e
Files
-
8facb8b2944a38fc0080732bd4fca04e.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.Upack Size: - Virtual size: 224KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 51KB - Virtual size: 80KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE