Static task
static1
Behavioral task
behavioral1
Sample
e1fb1aa2cf031295aa56645508ffd41d.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e1fb1aa2cf031295aa56645508ffd41d.dll
Resource
win10v2004-20240226-en
General
-
Target
e1fb1aa2cf031295aa56645508ffd41d
-
Size
84KB
-
MD5
e1fb1aa2cf031295aa56645508ffd41d
-
SHA1
d00a1697c3c83c9841fe1d56f9a017744aa04fc7
-
SHA256
74990b51a462e2116533212b1d9a41deaadb0da7082a8d8e8ac67f38dc22fdac
-
SHA512
df683be44349655e0611e559be68ce7644c723dab911a0dcd183b60794b7d9f6eeb4f77737c594d911a0a1a5d6bfaeba289bc3caae0fe0508bb638ea4916f3e7
-
SSDEEP
768:5VP9jpuTo5ZD4HlHPdZU70FprzmjyRXTdvnw930vtR2XY0fSjvDt99zFYTjmf68q:5VVITo5ZDWfzpXnLtRt0aj59FFYHEPz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e1fb1aa2cf031295aa56645508ffd41d
Files
-
e1fb1aa2cf031295aa56645508ffd41d.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
Size: - Virtual size: 96KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 54KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE