Static task
static1
Behavioral task
behavioral1
Sample
a0f95786d74ff238ac3b3b415949ace0N.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
a0f95786d74ff238ac3b3b415949ace0N.dll
Resource
win10v2004-20240802-en
General
-
Target
a0f95786d74ff238ac3b3b415949ace0N.exe
-
Size
306KB
-
MD5
a0f95786d74ff238ac3b3b415949ace0
-
SHA1
0b5be735058fd69dd45f6cf22fdb2d2905f4cb62
-
SHA256
df8dce1ee7e2c194ff3be88cc11e3ecd69ccfabb9b2ae9beb5e83b55ce628d4a
-
SHA512
29c19dd384f272464fb697713978e3ed31eb0785a459878cabc9f1bad56328b1818470d7ea82d86ab9d9f7d90daaead2de32fe514c9b4254e9e33dbeb4c248f1
-
SSDEEP
3072:VdTfrxerj474EArcIxwgWDaKwAF3kQvlwXIHO6zqf50huP9Vvgmn5NgjFkm:HTjUelArcI2g/2/aXIHOGqh02vgiAkm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource a0f95786d74ff238ac3b3b415949ace0N.exe
Files
-
a0f95786d74ff238ac3b3b415949ace0N.exe.dll windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Sections
.tdata Size: 132KB - Virtual size: 132KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ydata Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.mdata Size: 26KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ