Static task
static1
Behavioral task
behavioral1
Sample
9011197b17f4670a92d2fd2174149169.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
9011197b17f4670a92d2fd2174149169.dll
Resource
win10v2004-20231215-en
General
-
Target
9011197b17f4670a92d2fd2174149169
-
Size
98KB
-
MD5
9011197b17f4670a92d2fd2174149169
-
SHA1
83211c77fb9af2718e516206b57c3b9a4f84fe4f
-
SHA256
e6572ab9a5d0c5056c73a6e5581185daba31ef6322706620f93bae5937ecd570
-
SHA512
74988576adec674f392bd6c1a4f41702d812a59de4f4869650e063958c52585721074bbd406486e5d31d3eec095cfc335a0370506244fd00838dd94bb202262e
-
SSDEEP
1536:EI7tQ3FAGbfOcn0F256E64UvnZ6rEeb3H:D7wSG6W0FaT3UOH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9011197b17f4670a92d2fd2174149169
Files
-
9011197b17f4670a92d2fd2174149169.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.tttt Size: 66KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdddd Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.dddd Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
woria Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rerer Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
MABIDE Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bao Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE