Init
Static task
static1
Behavioral task
behavioral1
Sample
8a6e19f3375a6f2dd4ccf7ffc59ed8c4943c5d0355e1e3aeb47a6b721fa0182a.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
8a6e19f3375a6f2dd4ccf7ffc59ed8c4943c5d0355e1e3aeb47a6b721fa0182a.dll
Resource
win10v2004-20240802-en
General
-
Target
8a6e19f3375a6f2dd4ccf7ffc59ed8c4943c5d0355e1e3aeb47a6b721fa0182a
-
Size
2.6MB
-
MD5
f2a4e6236270eee1377dce0f2e5add6a
-
SHA1
6a6e93d2380c040ed20c914f672423842e71edc4
-
SHA256
8a6e19f3375a6f2dd4ccf7ffc59ed8c4943c5d0355e1e3aeb47a6b721fa0182a
-
SHA512
d4f558808fcefdb312baf4de6f0e1cf2627acc171ef917cd342f272071cd24437dee5f2a20b44c70245b1714a5d981a3a72fc75b885ea25c537592c00504d05c
-
SSDEEP
49152:5QUv+N+SgAH+bWZptYUje3fBSsGb/PDkiys7fbKXD8Lh2iLata1lGO:5D+ASgAebWtYUjMfs97fv2iokd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8a6e19f3375a6f2dd4ccf7ffc59ed8c4943c5d0355e1e3aeb47a6b721fa0182a
Files
-
8a6e19f3375a6f2dd4ccf7ffc59ed8c4943c5d0355e1e3aeb47a6b721fa0182a.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
Size: 124KB - Virtual size: 528KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 184KB - Virtual size: 2.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 16KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 204KB - Virtual size: 7.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE