Static task
static1
Behavioral task
behavioral1
Sample
a45047194a8d13c10f3eda63a9504053.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
a45047194a8d13c10f3eda63a9504053.dll
Resource
win10v2004-20240221-en
General
-
Target
a45047194a8d13c10f3eda63a9504053
-
Size
9KB
-
MD5
a45047194a8d13c10f3eda63a9504053
-
SHA1
d930818de9e3c4818bb0e3156240f018acaab6c9
-
SHA256
4c52bd67ab2d5c4ba0a15c6c82c9dedb0cbf9600cf3a57a5ff86efd88bec614f
-
SHA512
a2c07dd9a25aab090e42f6013771b6c2a97051e4ad5cf5dede97776f690eb674c573562ce8d928a3787584fca7b9e38ad30a5a7a7f245be6925c4aa76fd66b5f
-
SSDEEP
96:HgDilInAQ7zQsxXrK+Sew8/P6djxF2XdwwILILgHMhGTrJehVGN4YeOTle:ADilvMB2A/P6dIiJIu+cUPAFz0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a45047194a8d13c10f3eda63a9504053
Files
-
a45047194a8d13c10f3eda63a9504053.dll windows:4 windows x86 arch:x86
87bed5a7cba00c7e1f4015f1bdae2183
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
LoadLibraryA
GetProcAddress
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 696B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ