Static task
static1
Behavioral task
behavioral1
Sample
d39ff97ffc444bad490fbad740f9d332.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
d39ff97ffc444bad490fbad740f9d332.dll
Resource
win10v2004-20240226-en
General
-
Target
d39ff97ffc444bad490fbad740f9d332
-
Size
8KB
-
MD5
d39ff97ffc444bad490fbad740f9d332
-
SHA1
fc51087780a0642052ae1bdd09f18925b080a0bf
-
SHA256
d0632198f59c65c013806ad63582c1b62e22549e6f6ba078d7d0dc7d26470d44
-
SHA512
97746bd8507d0e1e50e7826dfbc23860e40ebd8fe69bce3bb8e0e93e54265e72870ba28997b9e07b08e228f8627d37ce3869ad067cbf3a913208fafe13528774
-
SSDEEP
96:Hmj68G8kjgqwWyeN70WEsrhdGQZ1QxLeJdUvX0SGogdiRxbcWgD6M6FnvDzwdt:IPGZgvo8GhtQxL0ufG61X+6M48X
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d39ff97ffc444bad490fbad740f9d332
Files
-
d39ff97ffc444bad490fbad740f9d332.dll windows:4 windows x86 arch:x86
87bed5a7cba00c7e1f4015f1bdae2183
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
LoadLibraryA
GetProcAddress
Sections
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 708B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ