Static task
static1
Behavioral task
behavioral1
Sample
c2fa3165083f90cd7c0c2d2a617fd073.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c2fa3165083f90cd7c0c2d2a617fd073.dll
Resource
win10v2004-20240226-en
General
-
Target
c2fa3165083f90cd7c0c2d2a617fd073
-
Size
3KB
-
MD5
c2fa3165083f90cd7c0c2d2a617fd073
-
SHA1
b1ebb67f54fa738dec36e27bef285d3e51947eea
-
SHA256
3c3e3b2e0cc89e5dcd619b9861b62083053e71038486aa6e9fc45d1d986d24ac
-
SHA512
fc5096e9804b5ba36506a95d610f804d1f2101155e36a283dc1dc9b6d2ab14fb64c02472d87d0523c30d78d736f2ea65869a51c22e04f36c9f134eab955a955b
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c2fa3165083f90cd7c0c2d2a617fd073
Files
-
c2fa3165083f90cd7c0c2d2a617fd073.dll windows:4 windows x86 arch:x86
b6f391375d741ab65301de3824d105be
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
CloseHandle
CreateMutexA
CreateProcessA
GetLastError
GetModuleFileNameA
ReleaseMutex
lstrcpyA
lstrlenA
Sections
.text Size: 1024B - Virtual size: 566B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 307B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 302B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 52B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ