Static task
static1
Behavioral task
behavioral1
Sample
dfe3ba9e598ff47dbc1acc4361c13f32e2338186530d73ac812298ac1f395937.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
dfe3ba9e598ff47dbc1acc4361c13f32e2338186530d73ac812298ac1f395937.dll
Resource
win10v2004-20240426-en
General
-
Target
dfe3ba9e598ff47dbc1acc4361c13f32e2338186530d73ac812298ac1f395937
-
Size
3.3MB
-
MD5
7e2afabff4abc2955f7f89b8e382b3a4
-
SHA1
326fcece176c7852d2df7a84ea86bfb095e74ce9
-
SHA256
dfe3ba9e598ff47dbc1acc4361c13f32e2338186530d73ac812298ac1f395937
-
SHA512
819b989e420c613b23661bbf30a9c50ec2fb1d9dd89323c360198d967d176462c9bd07a3c37e60d4e7d0349860e0305ba38813f382f54999c804e988af5a7af3
-
SSDEEP
98304:kw+jlHDGu5aGNd8ziBksm1CPwDv3uFfJ+:1slHDGuhd8iXm1CPwDv3uFfJ+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dfe3ba9e598ff47dbc1acc4361c13f32e2338186530d73ac812298ac1f395937
Files
-
dfe3ba9e598ff47dbc1acc4361c13f32e2338186530d73ac812298ac1f395937.dll windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Sections
.text Size: 2.3MB - Virtual size: 2.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 828KB - Virtual size: 828KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 11KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 112KB - Virtual size: 111KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.00cfg Size: 512B - Virtual size: 373B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 30KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ