Static task
static1
Behavioral task
behavioral1
Sample
c28741230608adfabc0beb11198ed978.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
c28741230608adfabc0beb11198ed978.dll
Resource
win10v2004-20240226-en
General
-
Target
c28741230608adfabc0beb11198ed978
-
Size
73KB
-
MD5
c28741230608adfabc0beb11198ed978
-
SHA1
f96877236193c0105d067d239fe27d3f314b06f3
-
SHA256
49ca652a4867a2240559d9bd23ca89b661277bbb3a97ac5704733da0b0890bd6
-
SHA512
a956094ad287ccc85b658d59a92bfc47fd3c04fd8046653377db1f11258dabdd8d4b68b42116f74bd6d0b7bfdf2a5fe709e98c7b9b4a45bb73fccafd777efb2c
-
SSDEEP
1536:v8Jwh/1x2c/JWMQQGxlAHWV4/s9L42VWMQQGx:0WbURM5KAHa4/97M5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c28741230608adfabc0beb11198ed978
Files
-
c28741230608adfabc0beb11198ed978.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
Size: - Virtual size: 84KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 48KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 355B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE