bInitProc
Static task
static1
Behavioral task
behavioral1
Sample
816cd2daaeea8aba8889ecd93ec03f20N.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
816cd2daaeea8aba8889ecd93ec03f20N.dll
Resource
win10v2004-20240802-en
General
-
Target
816cd2daaeea8aba8889ecd93ec03f20N.exe
-
Size
331KB
-
MD5
816cd2daaeea8aba8889ecd93ec03f20
-
SHA1
96a56499336d231a5c4c55a6c3020a1f224c4f55
-
SHA256
2c7db7d8d13b612dbe17ba7400fcfb39f83a4433c337d822662d344f6a0df0a8
-
SHA512
dc4e9452190cdfba3ddc917c570e9d5c29c37b0b7a2129c1993fbc5684c36efbeefa51fd8beea6ed8a99617446e2cb17cf6e65a86a3911dff8c237654bbc1acb
-
SSDEEP
3072:9N7X5ab0QQh+ifYaLT37qRZV37qjCiFQYziFQOCGwmcwRc1GlrhbK8QPaaCW08iW:915aweniGlrhbpQPG8h
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 816cd2daaeea8aba8889ecd93ec03f20N.exe
Files
-
816cd2daaeea8aba8889ecd93ec03f20N.exe.dll windows:3 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
Exports
Exports
Sections
.text Size: 512B - Virtual size: 148B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.edata Size: 512B - Virtual size: 71B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 328KB - Virtual size: 328KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ