Static task
static1
Behavioral task
behavioral1
Sample
99bfbe4c04c18542b7052ba1a6fcd684.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
99bfbe4c04c18542b7052ba1a6fcd684.dll
Resource
win10v2004-20231215-en
General
-
Target
99bfbe4c04c18542b7052ba1a6fcd684
-
Size
102KB
-
MD5
99bfbe4c04c18542b7052ba1a6fcd684
-
SHA1
06b5c57a4ac9546c51008c6092ba1f0f62ed8972
-
SHA256
ea467ecda211c6f82651bb4564339e00a1d11e547bc6aa7f7e346a3bb9b269f6
-
SHA512
d112aa4791f16a186c3e487716c41a888dd41885f72f441f7cad947f1973d2b45d4a1b613c438e432ad4ddde0d29cad096cc62b2d6ace5a7c71fd81ed738a28b
-
SSDEEP
1536:FGq/moJQGnAYY0sSSsxBRHYBDLy2xXk+b1itytbkzUaMx8QKPQldP9PP2x:BJMTS9rpp2xXrBitysN7MdP9P+x
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 99bfbe4c04c18542b7052ba1a6fcd684
Files
-
99bfbe4c04c18542b7052ba1a6fcd684.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 85KB - Virtual size: 84KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ