Static task
static1
Behavioral task
behavioral1
Sample
b612bce5a8a8c49523c5b7c1c5362c19.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b612bce5a8a8c49523c5b7c1c5362c19.dll
Resource
win10v2004-20240226-en
General
-
Target
b612bce5a8a8c49523c5b7c1c5362c19
-
Size
205KB
-
MD5
b612bce5a8a8c49523c5b7c1c5362c19
-
SHA1
46ca4fc751ca932135a6c2045212322c91f14997
-
SHA256
6f048a2e0357817bbb198cae532d2f96b99ba25d516868bab094be45fa64c9a6
-
SHA512
70598a52ca90bc8202413478fbb9fd1bcda8c980e5f1fa98cb2aec0207804dd1d11f47262c46e34ee1abeed9589b2db646ebfdbfd25431ade7aa1f792953dcb5
-
SSDEEP
3072:twLvY6vUax8bweSS3MInP3CeXKhqwJ+N/EJoSun5K909XB47ZBD66wsv2uD:G/MaabwebMcyeXKhqeJoDYy47rNv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b612bce5a8a8c49523c5b7c1c5362c19
Files
-
b612bce5a8a8c49523c5b7c1c5362c19.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 1KB - Virtual size: 116KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 64KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
xstqwq Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Size: - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ