Static task
static1
Behavioral task
behavioral1
Sample
e213efb7d58c5963c62211fb99f12491.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e213efb7d58c5963c62211fb99f12491.dll
Resource
win10v2004-20240226-en
General
-
Target
e213efb7d58c5963c62211fb99f12491
-
Size
2KB
-
MD5
e213efb7d58c5963c62211fb99f12491
-
SHA1
06df9e9f0cd55eb87dbb101a3f3c6d1dab25a410
-
SHA256
c0b4d69c1a6e401d5f1262d188de2549ddcb8677261210329431adfc903a0400
-
SHA512
c54d6928f49c0b011ba9e3c3ca41eb9d776007f65ae308d208028e75894700878f9875168eb2bc622be925971c666571ecaebe7cacbef4c72fcbb9b5ecb976f0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e213efb7d58c5963c62211fb99f12491
Files
-
e213efb7d58c5963c62211fb99f12491.dll windows:4 windows x86 arch:x86
30523690db33ccbd045433fb0d5c243d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
WinExec
Sections
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE