bgdll
Static task
static1
Behavioral task
behavioral1
Sample
a351b169f37fa706562c5f94195d43cf.dll
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
a351b169f37fa706562c5f94195d43cf.dll
Resource
win10v2004-20240221-en
General
-
Target
a351b169f37fa706562c5f94195d43cf
-
Size
28KB
-
MD5
a351b169f37fa706562c5f94195d43cf
-
SHA1
fff16951e365d80482e15257b7b843dd607677b0
-
SHA256
ed08aa402782c39df3b91eda8d1c88773b1b8e88783f1feb7e62bad276ab1be0
-
SHA512
a0eb76fa19030bcfbff60be888a54064e2d10d2af9b75e753c5d807b31772051b0772338c4e21957afec7e8724985a10da0795223a61ed7e31a59474e4867f41
-
SSDEEP
384:rtyuzCkzySFy8BTTVhOFf9nQWAOAYoEMOcbOAlC1Sk0F4Q+/6CddgdAzzu81:vM8BTTVhgJQSoEpHSk0CSKWazu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a351b169f37fa706562c5f94195d43cf
Files
-
a351b169f37fa706562c5f94195d43cf.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Exports
Exports
Sections
CODE Size: 21KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 512B - Virtual size: 180B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 1KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 512B - Virtual size: 69B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ