Static task
static1
Behavioral task
behavioral1
Sample
211543c68e0a48dd22fb3a2f920461640af0bb838348949116abe7c23a168937.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
211543c68e0a48dd22fb3a2f920461640af0bb838348949116abe7c23a168937.dll
Resource
win10v2004-20240802-en
General
-
Target
211543c68e0a48dd22fb3a2f920461640af0bb838348949116abe7c23a168937
-
Size
352KB
-
MD5
5dea66aa98d3d81213dd3010d7789599
-
SHA1
868413930449ebd7ee7eb2e7c7bba03d5988ab16
-
SHA256
211543c68e0a48dd22fb3a2f920461640af0bb838348949116abe7c23a168937
-
SHA512
cbb051265002698de7d1d7ba4ef07c301dad863dd731674a3c642a9c40358f8594aa157ab3874937d9ffbfcd365ef03c39447d7cfda1b1256f4269ee093ff377
-
SSDEEP
192:+/8eF1QmpYpgIt/7kLGGMJfgC4meaQ7FhETXNQLafOxCTW9WWEEQMN:+k9VppRpGMBgzaQ7F6OxSW9WWt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 211543c68e0a48dd22fb3a2f920461640af0bb838348949116abe7c23a168937
Files
-
211543c68e0a48dd22fb3a2f920461640af0bb838348949116abe7c23a168937.dll windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 373B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 758B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.shell Size: 320KB - Virtual size: 320KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ