Initialize
Static task
static1
Behavioral task
behavioral1
Sample
988b8e158c5514d8ab1df79db31137a3adf093929049bc337fc98f1388efca99.dll
Resource
win7-20240704-en
General
-
Target
988b8e158c5514d8ab1df79db31137a3adf093929049bc337fc98f1388efca99
-
Size
1.9MB
-
MD5
69f0f658f3bafbd995175306ffcce722
-
SHA1
cc6362c72ce8eb4fe387ca1df609421c67f7afba
-
SHA256
988b8e158c5514d8ab1df79db31137a3adf093929049bc337fc98f1388efca99
-
SHA512
317af97fbc45c8aa76ffe759e95b47d11c051961c04ff3dfc2e9b841bf7f9e9eeb53298db2288688d6d059ce1bf1b6afa6675d5f6b7d4d01765f8ba3d3de7f40
-
SSDEEP
49152:75PmUIDbh1Y4WwYZFUC+Nr5GOT2DQRQ8xmYkO7cugi66nY6aZSr:NPmHvYZFkkOKDKQBYkOAuDZnY6a6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 988b8e158c5514d8ab1df79db31137a3adf093929049bc337fc98f1388efca99
Files
-
988b8e158c5514d8ab1df79db31137a3adf093929049bc337fc98f1388efca99.dll windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Exports
Exports
Sections
Size: 44KB - Virtual size: 90KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Size: 20KB - Virtual size: 57KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 1024B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 3KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 512B - Virtual size: 500B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.edata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.wemod Size: - Virtual size: 2.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.boot Size: 1.8MB - Virtual size: 1.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ