Static task
static1
Behavioral task
behavioral1
Sample
e9fc2ab5ebf544d59bdb069c26523ee2fc09fa89854d5bded788d95811330983.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e9fc2ab5ebf544d59bdb069c26523ee2fc09fa89854d5bded788d95811330983.dll
Resource
win10v2004-20240221-en
General
-
Target
e9fc2ab5ebf544d59bdb069c26523ee2fc09fa89854d5bded788d95811330983.dll
-
Size
9.9MB
-
MD5
c6946df98a3f74033d3db457089ffa69
-
SHA1
793f42625898bbfa137bc6ff32fd0c4fcfdeefa6
-
SHA256
078282af1b5b394180fd8118df2979efb58eb91bd86a94e8507d25f658dd725e
-
SHA512
40a28ea13c23168aa81fd8cfc4013874a3034eb77c006b4f0e512ad8c63468455a746115ac2b439aea8d4bffcd95b7147a6014256131a515d1ddcf095a299ff8
-
SSDEEP
98304:Uxp40j8KSEZM6JUrlGoYwKH6Cl7zjMPhBQ0beagqrusQH1Fs2MPsimgom4eEb5ks:UknKSsJUB8DlgZBSN3Czci5iP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e9fc2ab5ebf544d59bdb069c26523ee2fc09fa89854d5bded788d95811330983.dll
Files
-
e9fc2ab5ebf544d59bdb069c26523ee2fc09fa89854d5bded788d95811330983.dll.dll windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.text Size: 8.9MB - Virtual size: 8.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.itext Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 172KB - Virtual size: 172KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: 40KB - Virtual size: 40KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.didata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.3NA0 Size: 10.3MB - Virtual size: 10.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.3NA1 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.3NA2 Size: 17.8MB - Virtual size: 17.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ