entry
Static task
static1
Behavioral task
behavioral1
Sample
634768b8541772087fcbe2a1464fd7028d99cf942fe0dd60f79befe4f3645731.dll
Resource
win10v2004-20240709-en
General
-
Target
634768b8541772087fcbe2a1464fd7028d99cf942fe0dd60f79befe4f3645731
-
Size
125KB
-
MD5
25401be2c7d6cf59a62c59975038c987
-
SHA1
fa1b638b9957da440c5f712cb7f092625518fd95
-
SHA256
634768b8541772087fcbe2a1464fd7028d99cf942fe0dd60f79befe4f3645731
-
SHA512
158d1698499f380232948471c491260ea8cf25f63fcd9fa2583474e02cf8383aebd007c10c56263df714f375c04d1a5502732d2c501a6f965cacaa3303dd018a
-
SSDEEP
3072:gRR2r+VXw8ARY3JvqkD1n1t5d8/H0PsDMAM:gRR2ql3JvqIt5dWeH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 634768b8541772087fcbe2a1464fd7028d99cf942fe0dd60f79befe4f3645731
Files
-
634768b8541772087fcbe2a1464fd7028d99cf942fe0dd60f79befe4f3645731.dll windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Exports
Exports
Sections
.text Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 140B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 115KB - Virtual size: 114KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 512B - Virtual size: 36B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 424B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ