Static task
static1
Behavioral task
behavioral1
Sample
022da314d1439f779364aba958d51b119ac5fda07aac8f5ced77146dbf40c8ac.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
022da314d1439f779364aba958d51b119ac5fda07aac8f5ced77146dbf40c8ac.dll
Resource
win10v2004-20240226-en
General
-
Target
462453a6f1ad82026e2a061a2702f150640edc4f285a65e2d96e71630a4c4aa4.zip
-
Size
205KB
-
MD5
790fe7c940ae77cf5e54100a1cd3403d
-
SHA1
71d76213a4ab9e6b32aba77d8440f4b4d8970ebb
-
SHA256
462453a6f1ad82026e2a061a2702f150640edc4f285a65e2d96e71630a4c4aa4
-
SHA512
9bd553fd53fb09a5ca505a5d2c7705826c0d5dabadd581c70095541adbfa4603a3cda01691885cee23783f6079e11369db636591421b3d05ceab063a521ea0f1
-
SSDEEP
6144:5IQixn/dCjSOLRQ+Pdv/FBvXXVQIbeXPuqyYUq99e/Y:5IQixn/dbOlVPJ/v1QIsPuaUbY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/022da314d1439f779364aba958d51b119ac5fda07aac8f5ced77146dbf40c8ac
Files
-
462453a6f1ad82026e2a061a2702f150640edc4f285a65e2d96e71630a4c4aa4.zip.zip
Password: infected
-
022da314d1439f779364aba958d51b119ac5fda07aac8f5ced77146dbf40c8ac.dll windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 297KB - Virtual size: 297KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 60KB - Virtual size: 1445.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 436B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.re�<0 Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ