Static task
static1
Behavioral task
behavioral1
Sample
432e9c13237df8f66a72d9a5db2f06e52e8358d6d604f007258bffa784760c90.dll
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
432e9c13237df8f66a72d9a5db2f06e52e8358d6d604f007258bffa784760c90.dll
Resource
win10v2004-20240226-en
General
-
Target
432e9c13237df8f66a72d9a5db2f06e52e8358d6d604f007258bffa784760c90
-
Size
281KB
-
MD5
94fddb101c5e0540274eb5b9803f47e9
-
SHA1
03560c112b23fcdce9dc6bf926753036f0aae441
-
SHA256
432e9c13237df8f66a72d9a5db2f06e52e8358d6d604f007258bffa784760c90
-
SHA512
d1b97bdffa32da836e8ced14b17fb760da1d5b9f0423c1f70160af565e9f9658e987d37dfd51e0b4cea2676391aa843b5b7342054ecffae67ca17b08835c90e6
-
SSDEEP
3072:XnzKfd37wuuet2b6JD8VSgYHktfjuzkjlMS0iyKTT3isa2CPD8D5DvD1avD1e7Rz:3WF18VS2Bjl9T3i7g1jZQSRrxrb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 432e9c13237df8f66a72d9a5db2f06e52e8358d6d604f007258bffa784760c90
Files
-
432e9c13237df8f66a72d9a5db2f06e52e8358d6d604f007258bffa784760c90.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 278KB - Virtual size: 278KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ