Static task
static1
Behavioral task
behavioral1
Sample
c33bab8c7f5d3a475688d1e135846360.dll
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
c33bab8c7f5d3a475688d1e135846360.dll
Resource
win10v2004-20231215-en
General
-
Target
c33bab8c7f5d3a475688d1e135846360
-
Size
219KB
-
MD5
c33bab8c7f5d3a475688d1e135846360
-
SHA1
8174f4513ca19632222f9ece8a09e0dd90baf435
-
SHA256
ae689ab20cff55d5cd5306d60fb4bcbcca81dc7748dd2fa1a5e4bb15174b4712
-
SHA512
099f4ea38785fece9e36564fc936d16d5de67cc5b41866f3d5500cab2d75945a2bee4c1cbf472aa7fd74fcf726df4bdcd385eaafc0a339aa2a3f409160c20818
-
SSDEEP
3072:83vScN4nr039c2P8kWz1/cKLeZWUtGm/8RMHFcCDC5wTYb6VEQz3KokRU0EmdSnw:83yrkcQRhkO/6EDC5wMb6VECajEXR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c33bab8c7f5d3a475688d1e135846360
Files
-
c33bab8c7f5d3a475688d1e135846360.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 194KB - Virtual size: 193KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 2KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ