Static task
static1
Behavioral task
behavioral1
Sample
be80e276ba14f92fec2837ba7a25fe6a.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
be80e276ba14f92fec2837ba7a25fe6a.dll
Resource
win10v2004-20240226-en
General
-
Target
be80e276ba14f92fec2837ba7a25fe6a
-
Size
148KB
-
MD5
be80e276ba14f92fec2837ba7a25fe6a
-
SHA1
97da0e3a0281f0a202c4d135bb0bf46107da62bc
-
SHA256
0b4840eb8dc19ba48422112e207cc4ebf27616a0bba4f1d62a59498d1a37d675
-
SHA512
0f77b60d6246aba28d242ce5bef996baaa12540f5f7ec698c629c52e00b7994aafc910d48517b9f7058e414019c19a620f16cd08d12276607feaf8105d71a481
-
SSDEEP
3072:Sfr+eMAe60S12fJWIR99WXyjYfmeK5Rxx3Q4KIsiYlfYDSM99:er9TD2fJGX4gKzUlfU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource be80e276ba14f92fec2837ba7a25fe6a
Files
-
be80e276ba14f92fec2837ba7a25fe6a.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 124KB - Virtual size: 123KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 2KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ