Static task
static1
Behavioral task
behavioral1
Sample
f34341ac57fa040f872a752e5436a4b0N.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
f34341ac57fa040f872a752e5436a4b0N.dll
Resource
win10v2004-20240709-en
General
-
Target
f34341ac57fa040f872a752e5436a4b0N.exe
-
Size
1.8MB
-
MD5
f34341ac57fa040f872a752e5436a4b0
-
SHA1
72a896910c1f5297d5aa6a6494045ac68d845326
-
SHA256
befc4475b8fa96a26203dd55196dceb03689ba08e46fc585972c8a8f82b7d18c
-
SHA512
360a042739f6d4c55af8d0cb97707fabd6dca5f719994bfc7e8d7a25fe2df3e3256cb4c64e8616bb49ded89433115e353498b63a6089dc12e7f5a11bbe881659
-
SSDEEP
6144:V78dOCUwZtELPwZwmN4aiBI0bJqoUwsAQ6iVqVN9IX3KjIYDj2/a:VsOzLaaLqV0Q6iElH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f34341ac57fa040f872a752e5436a4b0N.exe
Files
-
f34341ac57fa040f872a752e5436a4b0N.exe.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 200KB - Virtual size: 196KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 64KB - Virtual size: 61KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 44KB - Virtual size: 59KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ