Static task
static1
Behavioral task
behavioral1
Sample
8d549b13edf2b0738f2d810deea667e23a4a0e55260436b74e3e6723d2ae2317.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
8d549b13edf2b0738f2d810deea667e23a4a0e55260436b74e3e6723d2ae2317.dll
Resource
win10v2004-20240508-en
General
-
Target
8d549b13edf2b0738f2d810deea667e23a4a0e55260436b74e3e6723d2ae2317
-
Size
56KB
-
MD5
4a3b17209b0d42cba61363a00ba19f75
-
SHA1
1618a9f7ab839478f39f8ee3f0424396aef17f31
-
SHA256
8d549b13edf2b0738f2d810deea667e23a4a0e55260436b74e3e6723d2ae2317
-
SHA512
be258ad401712cd67b7f99d1c37232463886a90bd6a2b3d629f98c9158618e3538163e227953704d9e247263afed04be4285f13cca1d3f1c8cb5a482ae7a325f
-
SSDEEP
768:RQqXPHurp6hmY27ZbLPNmPJdmvDDDDDDDDDDDDDDDlGBn9w48Ekg55sztXy66U1r:Dap6QxvmhdmRGU48E12Ny631B7J5V
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 8d549b13edf2b0738f2d810deea667e23a4a0e55260436b74e3e6723d2ae2317
Files
-
8d549b13edf2b0738f2d810deea667e23a4a0e55260436b74e3e6723d2ae2317.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 20KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ