c:\temp\debug.pdb
Static task
static1
Behavioral task
behavioral1
Sample
72db19a5ccc7e378e72bd3cf8339280fc47f05b5ff65b1fb3893be6369a5c8bf.dll
Resource
win10-20231215-en
Behavioral task
behavioral2
Sample
72db19a5ccc7e378e72bd3cf8339280fc47f05b5ff65b1fb3893be6369a5c8bf.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral3
Sample
72db19a5ccc7e378e72bd3cf8339280fc47f05b5ff65b1fb3893be6369a5c8bf.dll
Resource
win11-20231215-en
General
-
Target
72db19a5ccc7e378e72bd3cf8339280fc47f05b5ff65b1fb3893be6369a5c8bf.dll
-
Size
59KB
-
MD5
128f2c45abb340712b5bdb9787664877
-
SHA1
e49dc6a12c76c9adf7a66e753b835fcd1cb48083
-
SHA256
72db19a5ccc7e378e72bd3cf8339280fc47f05b5ff65b1fb3893be6369a5c8bf
-
SHA512
6a2a4a1c4a5cc6ca2155ffd7f8849e73dba149e3b32beec13a37e68295f5f384195f7fc88eb2d4f1c3692ed3e4230b0383630842a8950b636e6a21806553fc70
-
SSDEEP
768:xiC/DyfvDF9JN1O7zub7+IJSuCMajTiAmPbjQLMf8shs1Fw9Dy:oC/DivXkOJSuwjFmz0Lchs1FAG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 72db19a5ccc7e378e72bd3cf8339280fc47f05b5ff65b1fb3893be6369a5c8bf.dll
Files
-
72db19a5ccc7e378e72bd3cf8339280fc47f05b5ff65b1fb3893be6369a5c8bf.dll.dll windows:6 windows x64 arch:x64
db7aeb75528663639689f852fd366243
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB Paths
Imports
kernel32
PeekNamedPipe
GetLastError
CreateMutexW
user32
MessageBeep
MessageBoxA
Exports
Exports
scab
Sections
.text Size: 46KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ