Static task
static1
Behavioral task
behavioral1
Sample
c6469e31683572bc2e4b94f27aa6754c.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c6469e31683572bc2e4b94f27aa6754c.dll
Resource
win10v2004-20240226-en
General
-
Target
c6469e31683572bc2e4b94f27aa6754c
-
Size
213KB
-
MD5
c6469e31683572bc2e4b94f27aa6754c
-
SHA1
b66d146d55c6de61e948d1d8cfead95431c59207
-
SHA256
0998034fb43e839ee2339f5215183977c78621b48f1f7be2afc4b67aae0dcb38
-
SHA512
b77b210bfe6de43a5c943902d5dc4ee674753fe80a1334b04984dc1263c56c1edd7f079da7f6c5172a6041a8c600e844a7507c85a0dd6587a71bedc64477e240
-
SSDEEP
3072:apeeFUvEPl5jy2T6kZt24qkpI1P3CSKWWOIfbNPe5CErepvSj:5vEbWY24qYE1bazNPs1uSj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c6469e31683572bc2e4b94f27aa6754c
Files
-
c6469e31683572bc2e4b94f27aa6754c.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 1KB - Virtual size: 116KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 65KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
deuc Size: 1KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ