entry
Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
cbfcc29cbe8f75f6607f3dc2947053f3e87f87a865dd5cba209b565467680661.dll
Resource
win10v2004-20240709-en
General
-
Target
cbfcc29cbe8f75f6607f3dc2947053f3e87f87a865dd5cba209b565467680661
-
Size
124KB
-
MD5
516bd01c342d576ed88542f5d4d4c694
-
SHA1
5f098ba4268f83a5c79ee64798fd4091716dff1d
-
SHA256
cbfcc29cbe8f75f6607f3dc2947053f3e87f87a865dd5cba209b565467680661
-
SHA512
0ee3cf5008f4e5c3c4bc95aeebd78c5dde6784c366edd32e12c634386425ecd46cce993f0345d1712099e550cb612a3c94f734e72f80449a3505a79676eaed92
-
SSDEEP
3072:/Ng1G74oBIVwV+/BfDMNjhSEUIHEg9iM4wIG3b4iNqOS6sAY:/NgyxpV+/y73Pi0IG0iMOH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cbfcc29cbe8f75f6607f3dc2947053f3e87f87a865dd5cba209b565467680661
Files
-
cbfcc29cbe8f75f6607f3dc2947053f3e87f87a865dd5cba209b565467680661.dll windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Exports
Exports
Sections
.text Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 140B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 115KB - Virtual size: 114KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 512B - Virtual size: 36B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 424B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ