DllCanUnloadNow
Static task
static1
Behavioral task
behavioral1
Sample
ddfc88936828a5bb17f47b24226c5aca.dll
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
ddfc88936828a5bb17f47b24226c5aca.dll
Resource
win10v2004-20240226-en
General
-
Target
ddfc88936828a5bb17f47b24226c5aca
-
Size
15KB
-
MD5
ddfc88936828a5bb17f47b24226c5aca
-
SHA1
531e46b2ddda4f053e20e6fd78de0c040e249ba7
-
SHA256
7fcd81c84c6aca91f2a289f1b8fdbb185d7a801aad59a6c677b3cea8de3595af
-
SHA512
8f8388002c0913477e56b9c730239fa662a5368bceebbafc9d779eb00ea557028957b4d92c30ee823bc57d93af10a8eeeff1c1fe1b24b335f12730c7be969201
-
SSDEEP
192:uydhEakO/jdnvJlVqEFDQaPzgFQqlKTwhg/uKJwWy3GCq:xdma9/ZR/FUNdDG/DwW4GCq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ddfc88936828a5bb17f47b24226c5aca
Files
-
ddfc88936828a5bb17f47b24226c5aca.dll windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 528B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 860B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ