Static task
static1
Behavioral task
behavioral1
Sample
bf9ba40d6acd8b73787e19e38f945d21.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
bf9ba40d6acd8b73787e19e38f945d21.dll
Resource
win10v2004-20240226-en
General
-
Target
bf9ba40d6acd8b73787e19e38f945d21
-
Size
11KB
-
MD5
bf9ba40d6acd8b73787e19e38f945d21
-
SHA1
6819a9e96769a03286adb361fca85b4c9601854d
-
SHA256
62f7a0ff8ed68a58efad0877d31a819c08e6ac0f895affd67a2b49d709a24195
-
SHA512
fba43f6fd62c153e13b0b24fb2f97d17b6b83747d8da87f955957b74f4b391c7d891a2ec36d27b0b29993f8d5f00403808d06bb4c956497511e1e0cfc632a9b4
-
SSDEEP
192:l8RixxRX4fsXgvFIaFdAFeoyC0pzW2In2cXTCkU8lyhpJaYYjbX:qR84fggdIsAFsypn2cXTCk5yPqfX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bf9ba40d6acd8b73787e19e38f945d21
Files
-
bf9ba40d6acd8b73787e19e38f945d21.dll windows:4 windows x86 arch:x86
87bed5a7cba00c7e1f4015f1bdae2183
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
LoadLibraryA
GetProcAddress
Sections
.text Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ