Static task
static1
Behavioral task
behavioral1
Sample
df1abc34237d2ccf54afb3394a5cc290N.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
df1abc34237d2ccf54afb3394a5cc290N.dll
Resource
win10v2004-20240802-en
General
-
Target
df1abc34237d2ccf54afb3394a5cc290N
-
Size
81KB
-
MD5
df1abc34237d2ccf54afb3394a5cc290
-
SHA1
e93c43b92197fe27a54d309ba3ec4fa3fb6dfe20
-
SHA256
83aca9b39b8e821d406780cb0f83086df21b6947cd00f6391d94b50b55254bdc
-
SHA512
c59401938476c72e7b24c459384e4f4c0f0443ca8c1bd2841f5acebcf56bc3bd662101f7a279af32690b6397706004fb572420f8e0d1259887ef206f73125d63
-
SSDEEP
1536:lCbhjW8rhK4rg6Z1qdkMB5eIO292XbNTx9sy8ifyXxyk3D3Wfn25B76Ps06DcBq4:QbhjWfe/+dkg4ZfWiKAC3W67E5nBq4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource df1abc34237d2ccf54afb3394a5cc290N
Files
-
df1abc34237d2ccf54afb3394a5cc290N.dll windows:4 windows x86 arch:x86
79b3362178937bf9559741c46bb9e035
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GetModuleHandleA
GetProcAddress
Sections
.text Size: - Virtual size: 130KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 16KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 29KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.yuuy0 Size: - Virtual size: 19KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 7KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.t Size: 80KB - Virtual size: 89KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ