Static task
static1
Behavioral task
behavioral1
Sample
ca77d259d821cee2e0f260302de7379b.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ca77d259d821cee2e0f260302de7379b.dll
Resource
win10v2004-20240226-en
General
-
Target
ca77d259d821cee2e0f260302de7379b
-
Size
388KB
-
MD5
ca77d259d821cee2e0f260302de7379b
-
SHA1
cb4cfc6f1cdf020db33e9f22d923adadbb93562a
-
SHA256
bf300bf16884a6b52272a9120ec6547873b89708b548bddccca4b3e4192d4f3a
-
SHA512
048342f717c94ecb53b31e63db09c8cdc69937d067678cb1cfa4549e042a86bfd8f24413f6830bc78e9e645e457d537c208fb48bb1e4ce47202f84eb183012e4
-
SSDEEP
6144:UB2/ohWqw6QUedIuNifWN4h58vCpZ9wrUupTh4gNZSiNJKavwAC0c:AIIgcuNiOvCpZ9wrUuta1imF0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ca77d259d821cee2e0f260302de7379b
Files
-
ca77d259d821cee2e0f260302de7379b.dll .ps1 windows:4 windows x86 arch:x86 polyglot
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.Upack Size: - Virtual size: 2.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 388KB - Virtual size: 420KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE