Static task
static1
Behavioral task
behavioral1
Sample
bebd0593ffbdcd9cc3696eb5371354db.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
bebd0593ffbdcd9cc3696eb5371354db.dll
Resource
win10v2004-20240226-en
General
-
Target
bebd0593ffbdcd9cc3696eb5371354db
-
Size
75KB
-
MD5
bebd0593ffbdcd9cc3696eb5371354db
-
SHA1
b65236ac4d6b92c57f7ee798391be3d0be5d0286
-
SHA256
ff1cb846b6ca6142a26628a3ac8b14a3d47e0f5095f713d828e1c3f9ea4ef4c1
-
SHA512
7c429165d4b5595317f8f35250ac358372ecac83275eb8057cf8ed1499c0cb154af8ab145db1b714d1d1a6dc6ef4751a5ff3794851f487782382e25e4709b2e9
-
SSDEEP
1536:XHHShygmkzuq8JE1TJC1KLLLmWgui+uXO1Lovm1KLL:XyYw652/D6bqaALuf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bebd0593ffbdcd9cc3696eb5371354db
Files
-
bebd0593ffbdcd9cc3696eb5371354db.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
rsrbudt Size: - Virtual size: 88KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
vprqu Size: 51KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
zf4yw Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE