Static task
static1
Behavioral task
behavioral1
Sample
c9bc578d8df28b1e4b3963ccba622dd1.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c9bc578d8df28b1e4b3963ccba622dd1.dll
Resource
win10v2004-20231215-en
General
-
Target
c9bc578d8df28b1e4b3963ccba622dd1
-
Size
56KB
-
MD5
c9bc578d8df28b1e4b3963ccba622dd1
-
SHA1
5e8389a786220767b33d788c33dbe22a2c1fbd2a
-
SHA256
507ba083723b49d4b877e7ee2f483d2a686c90b8df579334d38d05006b75813b
-
SHA512
27fdde612208adf4985942cf97359016adaf591dda4a08e5a16a8a773e4e5ee084d51571d351765a60db9084e18637bdf6d5e7aa6fa0b92ff9b44b1218f86192
-
SSDEEP
1536:f1qDQzZt7fba0iu8ejliHCj/t1LjWyyTCI:KWZxza0TjP1LjWyyl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c9bc578d8df28b1e4b3963ccba622dd1
Files
-
c9bc578d8df28b1e4b3963ccba622dd1.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 34KB - Virtual size: 34KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 512B - Virtual size: 476B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 2KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ