Static task
static1
Behavioral task
behavioral1
Sample
b97ab342a0350ae1e7a185e38d3b0207.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b97ab342a0350ae1e7a185e38d3b0207.dll
Resource
win10v2004-20240226-en
General
-
Target
b97ab342a0350ae1e7a185e38d3b0207
-
Size
32KB
-
MD5
b97ab342a0350ae1e7a185e38d3b0207
-
SHA1
2bddd5e2f05b747bff156ded3dbec7ab82bb70a1
-
SHA256
f46550d3a0a598689a2d6c3a19332ce412904cfd30b82d4cf49fbb3f42eee0ed
-
SHA512
14116b7aef265c0ecfe243792ef87d7df6d530036f9d5e942aa61324160352ecffc0afa5fb9dd521c379e40f059c39bc4a0a0f168eeef55bb05c17021ee44916
-
SSDEEP
48:9B/TEePPPPP30yEqiaVduEVafdUUfUnkeVBRqkfZxCVaaA2:bfMCUEVaNY/VBRdfyVaa
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b97ab342a0350ae1e7a185e38d3b0207
Files
-
b97ab342a0350ae1e7a185e38d3b0207.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
dhre3q0 Size: - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
dhre3q1 Size: 31KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
dhre3q2 Size: 789B - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE