Static task
static1
Behavioral task
behavioral1
Sample
b9e6afe21aed1539d3e3ca8984c4047d.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b9e6afe21aed1539d3e3ca8984c4047d.dll
Resource
win10v2004-20231215-en
General
-
Target
b9e6afe21aed1539d3e3ca8984c4047d
-
Size
30KB
-
MD5
b9e6afe21aed1539d3e3ca8984c4047d
-
SHA1
b3392a51f44fdb37f65df83ca6722c7a45defa96
-
SHA256
3bb2b1c8b8c541e2b57232394b21129f259f48d92606f77af060aad641dd1a25
-
SHA512
c721f209f9d5739ebc3ba9e692ca54bf2772283ce87bcb36cb2a1aeb86300aaa0a4208b51986116718147af33075676c257ded8a127d91bfa675744d76e39e23
-
SSDEEP
768:gUWdbVCtJh+e7y5jrKPL/+x03iFdtp+pINaYTUOU:gtGTUxrKPLGx+F/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b9e6afe21aed1539d3e3ca8984c4047d
Files
-
b9e6afe21aed1539d3e3ca8984c4047d.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
ypwo Size: - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rrintn Size: 29KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
fwwnr4 Size: 481B - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE