Static task
static1
Behavioral task
behavioral1
Sample
dfe70da05f7be5b0ffc9a65f7f2b6138.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
dfe70da05f7be5b0ffc9a65f7f2b6138.dll
Resource
win10v2004-20240226-en
General
-
Target
dfe70da05f7be5b0ffc9a65f7f2b6138
-
Size
12KB
-
MD5
dfe70da05f7be5b0ffc9a65f7f2b6138
-
SHA1
b6fc37c3f2c76c67779b065a142a6ee0e60bee5c
-
SHA256
7ddf5bee6ba3f246600da8efe8f1465f9b0d1a6caaa4f4f5858838456dac184e
-
SHA512
5336b9ddff77582acf6e4346fd5e3050d27e3d720fe5b323104319ca509321a4c62209fb295f7926f913729d812e6f8a2bbe9490ad36077915f0abbece34d642
-
SSDEEP
384:WWKW8Eogf2vDGLB6yiZujmugs9rYX+e8Mf7UkqCU:oRO2sB6EC9s9g+eGzn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dfe70da05f7be5b0ffc9a65f7f2b6138
Files
-
dfe70da05f7be5b0ffc9a65f7f2b6138.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.nsp0 Size: - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 12KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE