Static task
static1
Behavioral task
behavioral1
Sample
434516627657ef6aa47a8c48a414bc03.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
434516627657ef6aa47a8c48a414bc03.dll
Resource
win10v2004-20240226-en
General
-
Target
434516627657ef6aa47a8c48a414bc03
-
Size
110KB
-
MD5
434516627657ef6aa47a8c48a414bc03
-
SHA1
ab8a4d6edc0c77b7b2967cc24d42d70fee97f968
-
SHA256
236f579de40ed1020d2d6fbde43353052af405a6cf1b252722cab1e003198291
-
SHA512
60bbc8654093fba540e5887a1d67f81e109361d70e1a2df261d4557e72737270296be431057b1b56568a0b1a9915703aed3104074f510fda9bf917b8a2e482d6
-
SSDEEP
3072:UhG3Myi8ppWML+srFu9n3oBeThS7BOLrOoKkA3nMghAcDjOU0pXS1PJGWZsp0:Uc3Myi8ppWM6f9n3oBeThS4LrOoKkA3n
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 434516627657ef6aa47a8c48a414bc03
Files
-
434516627657ef6aa47a8c48a414bc03.dll windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 359KB - Virtual size: 358KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 169KB - Virtual size: 168KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 888B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ