Static task
static1
Behavioral task
behavioral1
Sample
b61c4bca534c5325b8ea1ef26aa0ffcc.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b61c4bca534c5325b8ea1ef26aa0ffcc.dll
Resource
win10v2004-20240226-en
General
-
Target
b61c4bca534c5325b8ea1ef26aa0ffcc
-
Size
2KB
-
MD5
b61c4bca534c5325b8ea1ef26aa0ffcc
-
SHA1
5789ebb11bfbffd93003265a2ee81f9e4b8d96dd
-
SHA256
dd5fbe2bff237a1f725795cfeff5e5d29412c0530d9559da870c8081b2520fc6
-
SHA512
c6e151347a9535a34eb8228d1eab7750b826b6f74f036f3b46ff558bd311a76143892ead0d73bc890a6a6387b318504512e897906dd579090fe929483aeef49b
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b61c4bca534c5325b8ea1ef26aa0ffcc
Files
-
b61c4bca534c5325b8ea1ef26aa0ffcc.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
Size: 204KB - Virtual size: 596KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 52KB - Virtual size: 105KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 740KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
hjwplrko Size: 564KB - Virtual size: 564KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
mdnduxia Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
mdnduxia Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE