ServiceMain
Static task
static1
Behavioral task
behavioral1
Sample
9b7cd10c151e30563766438374597bb8.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
9b7cd10c151e30563766438374597bb8.dll
Resource
win10v2004-20231222-en
General
-
Target
9b7cd10c151e30563766438374597bb8
-
Size
76KB
-
MD5
9b7cd10c151e30563766438374597bb8
-
SHA1
8cf00d4de09ed9b12ae4d9b48ea57c58c25cedf9
-
SHA256
86dafd1f82e22496798c50a3884c62149561778f8c24c0e94be42e3c14b04789
-
SHA512
bd6a9bbfb8726090e0acbdb4315cc4941e9461eed01d2b6c10ffd81b02c659930c689fa31e12168e7b6e98caec785a61dbb23ec33c63a521558b4c8e8613d6ed
-
SSDEEP
1536:mnjLr4fXAaLTYS+Ej5Oasyddf8DbLa4heTg/FL:mjv4fCOvsyd58DCyeEF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9b7cd10c151e30563766438374597bb8
Files
-
9b7cd10c151e30563766438374597bb8.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
.text Size: 46KB - Virtual size: 45KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 99KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data1 Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ