Static task
static1
Behavioral task
behavioral1
Sample
c47d4be27e791f005cbc2c574202b5d0.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c47d4be27e791f005cbc2c574202b5d0.dll
Resource
win10v2004-20240226-en
General
-
Target
c47d4be27e791f005cbc2c574202b5d0
-
Size
46KB
-
MD5
c47d4be27e791f005cbc2c574202b5d0
-
SHA1
4b80b7e1f73dc30083168b61a2a9cab2d42bff08
-
SHA256
dbf47f6f493ff3c4c4c332c18c1fc571b03349d8538620c9306a3a98d53b9886
-
SHA512
6620caac2c7406090f29ac4f4f6ccadab59b62929208ce2d6158e73b24cf823a8dc170d9cf8cca53c9aed708532c3ae9dc7fbe7ed0c7cbf6fce40d210c7aa0ac
-
SSDEEP
768:r3tlLXx4HDfvpuS53i6eQhwdMjyY2oWy0WEaH:joHpu4iTQ+dMuY2oxW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c47d4be27e791f005cbc2c574202b5d0
Files
-
c47d4be27e791f005cbc2c574202b5d0.dll windows:5 windows x86 arch:x86
b4e707e9acecd405bdd67065419b8250
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
ntoskrnl.exe
ExAllocatePool
MmUnmapLockedPages
hal
KfLowerIrql
Sections
.text Size: 45KB - Virtual size: 45KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 92B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ