DataSource.pdb
Static task
static1
Behavioral task
behavioral1
Sample
96e8d3c2a77dcad60b60e1926306593b.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
96e8d3c2a77dcad60b60e1926306593b.dll
Resource
win10v2004-20231215-en
General
-
Target
96e8d3c2a77dcad60b60e1926306593b
-
Size
683KB
-
MD5
96e8d3c2a77dcad60b60e1926306593b
-
SHA1
06f5adbb309047cda538808f3a9dfb98d9fbd9fe
-
SHA256
3e0b1e3f56a5d0fe348107343487bbfa8ae3990f28f240bb41c0b86c348db1d8
-
SHA512
b894e6cec0aaa5ae621a57090e3efa4003782b5c20dd06f06e3b444c66df76d2bf24efe4ccf1809314a830aa4b653e6537489ee405f542d68ff68fefb2b4c658
-
SSDEEP
12288:5ncdkhWmJd9rWG2HHIt7luMbm9D13nOLZyuViLNz2WYkV:5ikhWOKYluMbqD13nOLZyu+gWL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 96e8d3c2a77dcad60b60e1926306593b
Files
-
96e8d3c2a77dcad60b60e1926306593b.dll windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Sections
.data Size: 166KB - Virtual size: 166KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.xdata Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 458KB - Virtual size: 458KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.extrel Size: 512B - Virtual size: 67B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 43KB - Virtual size: 42KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ