Static task
static1
Behavioral task
behavioral1
Sample
33c79b20dbac07e17bc16478adf18cc7635330e5af0cb6b79a89a8064ca1bee0.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
33c79b20dbac07e17bc16478adf18cc7635330e5af0cb6b79a89a8064ca1bee0.dll
Resource
win10v2004-20240802-en
General
-
Target
33c79b20dbac07e17bc16478adf18cc7635330e5af0cb6b79a89a8064ca1bee0
-
Size
80KB
-
MD5
41f99815b7b9296baa9e29b49e178d21
-
SHA1
d537b9cac2a87fbf8e47e6e606a004b58f7d0ec9
-
SHA256
33c79b20dbac07e17bc16478adf18cc7635330e5af0cb6b79a89a8064ca1bee0
-
SHA512
05e02722df6d0a0c5a2180a63ca1d7b154b978d206d44e62cf4a005a1e8c1d5d31e46e05deac38e13f594a2d06b80cabac7125c0536f20bc7578fce34f783090
-
SSDEEP
384:/Mq8wfvFjUocJQZ/YGjM6fj3jPg2DTbRXY4kC577sZp20sXY4kCV87U7Zp20aXYZ:/MqvCoci/YGIizLTDTsZG57ZJMk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 33c79b20dbac07e17bc16478adf18cc7635330e5af0cb6b79a89a8064ca1bee0
Files
-
33c79b20dbac07e17bc16478adf18cc7635330e5af0cb6b79a89a8064ca1bee0.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 68KB - Virtual size: 65KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 680B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ