Static task
static1
Behavioral task
behavioral1
Sample
b9e957861bbb56b31c9781efded587ec.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b9e957861bbb56b31c9781efded587ec.dll
Resource
win10v2004-20240226-en
General
-
Target
b9e957861bbb56b31c9781efded587ec
-
Size
37KB
-
MD5
b9e957861bbb56b31c9781efded587ec
-
SHA1
a2138e44ea3b8a1d4cbfa9faa67e5f6916e1bed1
-
SHA256
27a25d8ecd37de438b3fd799d8c5c2d66292cce2067be28f5fe9f702153510d1
-
SHA512
d8ad8fdbdabed91818516e640171b19a66f44ad0708949a5a9a679e7f1980f3e13480b5b1ce8cd1126d0971de7764860b8860b6f47353ba03f138189ed75d386
-
SSDEEP
768:38XScD1GgWStNQJVlwsT9WTqoc3a8qJzNj:sSm1GgNoCKWokRj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b9e957861bbb56b31c9781efded587ec
Files
-
b9e957861bbb56b31c9781efded587ec.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 11KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ