Static task
static1
Behavioral task
behavioral1
Sample
a0b6bfe212ffe572475f0bc393d53bcd.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
a0b6bfe212ffe572475f0bc393d53bcd.dll
Resource
win10v2004-20240221-en
General
-
Target
a0b6bfe212ffe572475f0bc393d53bcd
-
Size
9KB
-
MD5
a0b6bfe212ffe572475f0bc393d53bcd
-
SHA1
1198a3936aea5c85d06f024d3fce712c99b59440
-
SHA256
8c238f1785a410e6c808df2c6a75a0ba2ed16950d55af6544a2045aeb823f004
-
SHA512
262632b2a0c0d78614f58c2a4b3b7691ab0eda44981425f9951c5706b4c9cd7c62725c4730efa97644265068105891a156c97b79b0a4a37130b049d5a938d544
-
SSDEEP
192:kh5+x8mcZYL08c+P55MUJXp+hDYT/SPq5H:aEVcZg08cHUJXp+hDG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a0b6bfe212ffe572475f0bc393d53bcd
Files
-
a0b6bfe212ffe572475f0bc393d53bcd.dll windows:4 windows x86 arch:x86
87bed5a7cba00c7e1f4015f1bdae2183
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
LoadLibraryA
GetProcAddress
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 708B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ