Static task
static1
Behavioral task
behavioral1
Sample
bb1cb24b792b4e4204ccc38a7461f27f62589b28387a560faa4352bf8df8c9a8.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
bb1cb24b792b4e4204ccc38a7461f27f62589b28387a560faa4352bf8df8c9a8.dll
Resource
win10v2004-20240426-en
General
-
Target
bb1cb24b792b4e4204ccc38a7461f27f62589b28387a560faa4352bf8df8c9a8
-
Size
5.3MB
-
MD5
1f7e1b1ffc6989c92a7452bf86ee509f
-
SHA1
6dab135112f558591f0931db4943124de15837bd
-
SHA256
bb1cb24b792b4e4204ccc38a7461f27f62589b28387a560faa4352bf8df8c9a8
-
SHA512
2921bfe29dcd50d53bc6ab59b5cbc3817eb6fa8c333ab0cde1e9ac33196b9a63e1f913f24e1d2c37281863844ced10620871b14d9f27b03352c53aaf087b0f36
-
SSDEEP
49152:P3dLDCMo/RPnQ+BIaocKkzj6b3QGLs1bo0lPooXBUjIxk6linR9cFSUMVCAIiNaw:P83RPnQiDormowNqaAVzAQUMVpax2n
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bb1cb24b792b4e4204ccc38a7461f27f62589b28387a560faa4352bf8df8c9a8
Files
-
bb1cb24b792b4e4204ccc38a7461f27f62589b28387a560faa4352bf8df8c9a8.dll windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
Size: 2.6MB - Virtual size: 6.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1.2MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 3.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
abuclgwq Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
wrotwhmm Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE