Static task
static1
Behavioral task
behavioral1
Sample
b541564db05004dfccc6799a6b86a21c.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b541564db05004dfccc6799a6b86a21c.dll
Resource
win10v2004-20240226-en
General
-
Target
b541564db05004dfccc6799a6b86a21c
-
Size
7.3MB
-
MD5
b541564db05004dfccc6799a6b86a21c
-
SHA1
24f879ab151666ae881730c405b7f6e077572909
-
SHA256
fd426c20a1fca99b869546f0c6a0a5783a2142df3022a4aaef4e7460c66cddad
-
SHA512
b8e1feb749e691ecc5ddd77f3f39989dee5a0b740662d494b5c29e3f244e7b282e49a2960231835cb5f55f4a4775fe56ee835f4d66ebc4225e8d045669811532
-
SSDEEP
196608:LVIuCMx0qGhWlzVulCvRMRs7lTxj7JBrVIuCMx0qGhWlzVulCvRMRs7lTxj7JB:LVIuVx0qGx+H7LVIuVx0qGx+H7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b541564db05004dfccc6799a6b86a21c
Files
-
b541564db05004dfccc6799a6b86a21c.dll windows:7 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
m cannot Size: 1090.0MB - Virtual size: 518.3MB
IMAGE_SCN_MEM_READ
E Size: 3584.0MB - Virtual size: 4.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
� Size: 16B - Virtual size: 144B
� Size: 8KB - Virtual size: 32.0MB