start
Static task
static1
Behavioral task
behavioral1
Sample
d71b52866aea0c42df38d9f861ae899f.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
d71b52866aea0c42df38d9f861ae899f.dll
Resource
win10v2004-20240226-en
General
-
Target
d71b52866aea0c42df38d9f861ae899f
-
Size
197KB
-
MD5
d71b52866aea0c42df38d9f861ae899f
-
SHA1
bc1dac8609a9060bc61ecde15eca467cd2e7b8af
-
SHA256
1043bac3b11f5327c876f9c00468afd16221f39b69f287a0961fff1ed32baa9c
-
SHA512
d9d86b2322dc5d042d63bcdb5d37d1bcde515c7b2182912b777dce58226d97ff9fd1fb8b8328a14654fbb26012fde56ea0c669b8629339eb92d8e6ae65096c6b
-
SSDEEP
3072://xZmQqyTNd3ModUhZaK4hQ1N2wAuoljFYTADKItdMVSAXcfn/jVG2DHI9OSyRUf:RZplJdnK34+1D4YkeIdR/RlDHdtc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d71b52866aea0c42df38d9f861ae899f
Files
-
d71b52866aea0c42df38d9f861ae899f.dll windows:4 windows x86 arch:x86
3c0e70bfa5f73f1f1cef484e2bcb5bf8
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GetModuleHandleA
user32
MessageBoxA
Exports
Exports
Sections
Size: 123KB - Virtual size: 228KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 20KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 25KB - Virtual size: 2.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 12KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE