Static task
static1
Behavioral task
behavioral1
Sample
bc4f57a00e5675efa561e88cb35b8e49.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
bc4f57a00e5675efa561e88cb35b8e49.dll
Resource
win10v2004-20231215-en
General
-
Target
bc4f57a00e5675efa561e88cb35b8e49
-
Size
213KB
-
MD5
bc4f57a00e5675efa561e88cb35b8e49
-
SHA1
a5899f75e470efb47cda495f93f0df021fd9e959
-
SHA256
2f1d2d757c1df4395699cae1495c70dd56a2876648ada74b8b9d0e52e511175c
-
SHA512
7a92586f44a970057c345b7d062ea9c0d7898771b9278af3ec51869a7982c3005206cf9a5c5faf5bb7755aa5b16f9f74c14ec6c7b439192c5c555724657fc495
-
SSDEEP
3072:59eQlEatVN2j8XTfkpNrsQIoFP3pp522eujQWIh+NTI5t3UKkuBG:54Ql5jtkNsQx5r22tOh+lI5t3U4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bc4f57a00e5675efa561e88cb35b8e49
Files
-
bc4f57a00e5675efa561e88cb35b8e49.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 1KB - Virtual size: 116KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 63KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
maaest Size: 1KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ