Static task
static1
Behavioral task
behavioral1
Sample
ab20564d8d8433113f18df165a0028ff.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ab20564d8d8433113f18df165a0028ff.dll
Resource
win10v2004-20240226-en
General
-
Target
ab20564d8d8433113f18df165a0028ff
-
Size
8KB
-
MD5
ab20564d8d8433113f18df165a0028ff
-
SHA1
cd45d0e4c68c508deb6dfe1f12dbd302552a8826
-
SHA256
0f1df1604ebc0a2cbf9af7f28a3c8a1162a8d23797ea037f06c1d43de53b7c25
-
SHA512
06d8e7dfde05b967e19f687024d6562abfed514c95105d5b41e3e0f8ee12e42249433618f47faed76334a3bb7bde91c2583a2fad70a70745753a69f4f3091bd8
-
SSDEEP
192:1TynAqm1o+L6sTYie1k7VSl6+yXRlsk8/nkgUw94u:VR1DTG4EMJ7u
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ab20564d8d8433113f18df165a0028ff
Files
-
ab20564d8d8433113f18df165a0028ff.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.Upack Size: - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE