Static task
static1
Behavioral task
behavioral1
Sample
c804614bca36591258436329a3a1b1fa.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c804614bca36591258436329a3a1b1fa.dll
Resource
win10v2004-20240226-en
General
-
Target
c804614bca36591258436329a3a1b1fa
-
Size
78KB
-
MD5
c804614bca36591258436329a3a1b1fa
-
SHA1
24f85a9698a1df7db9c0a58a11c3d5027391384b
-
SHA256
73fe05bb6a91c283b4c45731ace4fe053963903de639f33eba7b5b7e58480961
-
SHA512
5d8b0e5d9b09a50df98b7b4784f094b8cecb72bbe8cd40c74c255b4ee66021795c11dcc9b134f9d45712bde381934d48d25cc4b68e9f184ef6fe652039a795a1
-
SSDEEP
1536:9q623kxOQQHWAcjYYKrb3jMc9zCFiysehT93Hn8g/f11Ckuj:9q620W2AKbKjMclCFsCT9Xnj/fGxj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c804614bca36591258436329a3a1b1fa
Files
-
c804614bca36591258436329a3a1b1fa.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: - Virtual size: 140KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 70KB - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 46KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
ayyoz Size: 561B - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
bbnd Size: - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ