Static task
static1
Behavioral task
behavioral1
Sample
dfac60ca519b433b1aa25887a1d84ffa4b9d76e0b4763948a8cdd6f06d3e3894.dll
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
dfac60ca519b433b1aa25887a1d84ffa4b9d76e0b4763948a8cdd6f06d3e3894.dll
Resource
win10v2004-20240226-en
General
-
Target
dfac60ca519b433b1aa25887a1d84ffa4b9d76e0b4763948a8cdd6f06d3e3894
-
Size
10KB
-
MD5
c2275a9b922e56da184fb9f13a6b4fc4
-
SHA1
84b34b67aeb19aac71b74992196820f02b73e03c
-
SHA256
dfac60ca519b433b1aa25887a1d84ffa4b9d76e0b4763948a8cdd6f06d3e3894
-
SHA512
332334f22988d26b1e265962ac5575bc49e904bddea145fba2c0d51abd3a490a0e2c2752116251367e8efe1036e0db15c0ecd917bf1a7a248f0c8a176341ef7d
-
SSDEEP
192:CStbZ1M0M8HTnAfuzuGOLq9w1v8opIW1kn4kx/TC0lAL5KDm:CeZK0Dr3Xv9OvJon4RlKS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dfac60ca519b433b1aa25887a1d84ffa4b9d76e0b4763948a8cdd6f06d3e3894
Files
-
dfac60ca519b433b1aa25887a1d84ffa4b9d76e0b4763948a8cdd6f06d3e3894.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 1024B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ