Static task
static1
Behavioral task
behavioral1
Sample
b2a642b0a89c452eaeded132f069eced373a1bd1ff25b768f60fd34f40f3375b.dll
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
b2a642b0a89c452eaeded132f069eced373a1bd1ff25b768f60fd34f40f3375b.dll
Resource
win10v2004-20240419-en
General
-
Target
b2a642b0a89c452eaeded132f069eced373a1bd1ff25b768f60fd34f40f3375b
-
Size
1.0MB
-
MD5
ac70244e3f45a4e53d23c653f9243219
-
SHA1
17ef491125acf5dffe7d79ec4d6ca8a9fd70c4a8
-
SHA256
b2a642b0a89c452eaeded132f069eced373a1bd1ff25b768f60fd34f40f3375b
-
SHA512
d8877176f513030c66a3e47c8ac30df7e7555c13e7dcaa6d0967d3b47dd4cd7632abf21ecd4b0ca5ed52608e948d11dacd8550373c86719dad6c34acef3d9478
-
SSDEEP
768:D2xpTenFmmqfz9krzKiPNNx5qdICEHtmvFznaJzYmBg0H7os8zHg:KNXYNNx5qdPEHwxmBg0H758zA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b2a642b0a89c452eaeded132f069eced373a1bd1ff25b768f60fd34f40f3375b
Files
-
b2a642b0a89c452eaeded132f069eced373a1bd1ff25b768f60fd34f40f3375b.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 1.0MB - Virtual size: 1.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 784B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ