Static task
static1
Behavioral task
behavioral1
Sample
805809071e1071010f0a351a65ea5f4062182356897b4981c0a021e30b6472cf.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
805809071e1071010f0a351a65ea5f4062182356897b4981c0a021e30b6472cf.dll
Resource
win10v2004-20240802-en
General
-
Target
805809071e1071010f0a351a65ea5f4062182356897b4981c0a021e30b6472cf
-
Size
29KB
-
MD5
98ce083280ab71742db513e8cc0a003b
-
SHA1
b44cb16233d61009d706fa181adb1ae4c06a258b
-
SHA256
805809071e1071010f0a351a65ea5f4062182356897b4981c0a021e30b6472cf
-
SHA512
0d3230ad06eeb52762960b853c5f0e6df27d7ce90c0ea43f3da76c689840eb3c3078cfcd45d5453d5213943fdcc6486eeb7606c14e88c4ab387990a730807303
-
SSDEEP
384:VgdrAa6H6UGQxvmYpde7htnrt3adg6YWP9OE6Ijis6u4AcndkT:Oia6H61QgYpw7fr556JBeS4AQdk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 805809071e1071010f0a351a65ea5f4062182356897b4981c0a021e30b6472cf
Files
-
805809071e1071010f0a351a65ea5f4062182356897b4981c0a021e30b6472cf.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
S[I1ku Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 21KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 952B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ