Static task
static1
Behavioral task
behavioral1
Sample
SharpZipLib.dll
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
SharpZipLib.dll
Resource
win10v2004-20240508-en
General
-
Target
SharpZipLib.dll
-
Size
112KB
-
MD5
3a56595b8bbeb9a8ec58dd8828d1930b
-
SHA1
3d60132458effa9aabc50f23161f5fdcddf3a509
-
SHA256
b7386a1c5c0966ec0f0f8fc451cd518a3172144b953f4076b972d107b9616c75
-
SHA512
77215257909066534d4221f52e6c542f665cd4572fca308e59486e86283f2edc9f35d8f991ac75cc7bbd1c27be3529dd1a65b7775c7250a91336d03d988ae937
-
SSDEEP
1536:y8ZcCl1nQKNNNb3SiGTbD584I7RN+bPrDlK3B5VK2vOKpLh79x4KHKOq64G8area:FZfYKNNNjHNKQ4qKHuAiCD5CCitwq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource SharpZipLib.dll
Files
-
SharpZipLib.dll.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 100KB - Virtual size: 97KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 992B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ