Static task
static1
Behavioral task
behavioral1
Sample
5d80c1357e9ddb5c867b2824c0fe53e95747fda9eebf6d7ae0adeb9b9d8cdd8a.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
5d80c1357e9ddb5c867b2824c0fe53e95747fda9eebf6d7ae0adeb9b9d8cdd8a.dll
Resource
win10v2004-20240226-en
General
-
Target
5d80c1357e9ddb5c867b2824c0fe53e95747fda9eebf6d7ae0adeb9b9d8cdd8a
-
Size
281KB
-
MD5
e2a55ca02c927952a734d9fad12c8528
-
SHA1
40597be442e01b5fae8c165edf9c9b3bfed1e112
-
SHA256
5d80c1357e9ddb5c867b2824c0fe53e95747fda9eebf6d7ae0adeb9b9d8cdd8a
-
SHA512
dc361980dd8c6f99b656ae510a89200ee1817f51cd6d5ea843eb0726ec9a39684d4e4d311f0a0c981495e281741eb53e9dfcbeaf19a314555e85a6441ae6f284
-
SSDEEP
6144:p4nWo4/kUGw1LFTv1gSjtuxCZjzlRc+hcbOaaHOY9fy/YOVtpfR5:O4cUzDBgSjJ/PrhciaCovVtpff
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5d80c1357e9ddb5c867b2824c0fe53e95747fda9eebf6d7ae0adeb9b9d8cdd8a
Files
-
5d80c1357e9ddb5c867b2824c0fe53e95747fda9eebf6d7ae0adeb9b9d8cdd8a.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB Paths
Imports
mscoree
_CorDllMain
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 1004B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ