entry
Static task
static1
Behavioral task
behavioral1
Sample
b85823650d07799113c70379edc950b0N.dll
Resource
win7-20240704-en
General
-
Target
b85823650d07799113c70379edc950b0N.exe
-
Size
123KB
-
MD5
b85823650d07799113c70379edc950b0
-
SHA1
849c56d7a9035360d793e7bec3249a54b7a4a536
-
SHA256
268a2788188e52f723cce5babdf6b0178dd68c91924b58a7bd15e29c6cb63e28
-
SHA512
17200c0c7dad83e57c3dd1e96a6e5dca68d8afe208592d617d594bf34e3c1c071ce3d5d2d08dc3469d0ea2c29020bb653b7fca83a7742678eed48208ea31a603
-
SSDEEP
3072:3OfmXCjp8+XKmBnhJzI3GfO7IgtX7PZjdEfQ8of+/:tXCjmCjVhh4P1zf+/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b85823650d07799113c70379edc950b0N.exe
Files
-
b85823650d07799113c70379edc950b0N.exe.dll windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Exports
Exports
Sections
.text Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 140B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 115KB - Virtual size: 114KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 512B - Virtual size: 36B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 424B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ