GPBExecutePack
Static task
static1
Behavioral task
behavioral1
Sample
44af008b4e96c05d6361baa6be16532f88fdcf84d294ce74e9c0eb5de5fd1fcb.dll
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
44af008b4e96c05d6361baa6be16532f88fdcf84d294ce74e9c0eb5de5fd1fcb.dll
Resource
win10v2004-20240508-en
General
-
Target
44af008b4e96c05d6361baa6be16532f88fdcf84d294ce74e9c0eb5de5fd1fcb
-
Size
150KB
-
MD5
86a1d2e0e8832c8a5495608cd89280d9
-
SHA1
561c2d00f745fe2ffa3a2ad24a59b9d062d8410a
-
SHA256
44af008b4e96c05d6361baa6be16532f88fdcf84d294ce74e9c0eb5de5fd1fcb
-
SHA512
b58c005cd3dda0ad2a602d42750192f269366aea06a3809d53d7ed438610f4187bd209fdc7ba0c652cd40fab89b58bd33a29b0e2c550106a530c3f4156a3f7a1
-
SSDEEP
3072:wrRnTzrFyOtV18gJ5q6nWdAvEDdj+fHy7HI8ENN6aKwD:oyOtVuzdAs4vx6an
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 44af008b4e96c05d6361baa6be16532f88fdcf84d294ce74e9c0eb5de5fd1fcb
Files
-
44af008b4e96c05d6361baa6be16532f88fdcf84d294ce74e9c0eb5de5fd1fcb.dll windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Exports
Exports
Sections
CODE Size: 126KB - Virtual size: 125KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 13KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 512B - Virtual size: 77B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ