Start
Static task
static1
Behavioral task
behavioral1
Sample
b80b291ebf289008d54ccefb4825a9aa.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b80b291ebf289008d54ccefb4825a9aa.dll
Resource
win10v2004-20240226-en
General
-
Target
b80b291ebf289008d54ccefb4825a9aa
-
Size
12KB
-
MD5
b80b291ebf289008d54ccefb4825a9aa
-
SHA1
3f7ba7a38c622fc87c2c021b23c83f977143151e
-
SHA256
f51acd2937f0fb7cd0f6d16ee305d8149e4f5fb1866445b21fc98862865afcef
-
SHA512
3a0b54dad30e7476891687f4eb65ae49c728dd29f138c4971243cf824238ed5ee99b0adbd027148e44dd5db18cf409efec8b7f2c823341452d5aa64cf16ffc0b
-
SSDEEP
192:6QY1qNE/AzmIFHMudHf/Sn7YBLGYUYSbDVvbUCTX2FGYHFHGElLqRDYO1XjZ9vgp:61qN4hYdHf/+YoTjL1o8n935Y
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b80b291ebf289008d54ccefb4825a9aa
Files
-
b80b291ebf289008d54ccefb4825a9aa.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
.Upack Size: - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE