Static task
static1
Behavioral task
behavioral1
Sample
b5a9b77a3468fbe9c4cf977c16f9c847a4c922c3ab1b3eacc08669f4478942fbN.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b5a9b77a3468fbe9c4cf977c16f9c847a4c922c3ab1b3eacc08669f4478942fbN.dll
Resource
win10v2004-20240802-en
General
-
Target
b5a9b77a3468fbe9c4cf977c16f9c847a4c922c3ab1b3eacc08669f4478942fbN
-
Size
148KB
-
MD5
9eddc34773e1116327e8fdbd0904c910
-
SHA1
d4be5578e1f0825d0af21f52b1fa533ab5de1782
-
SHA256
b5a9b77a3468fbe9c4cf977c16f9c847a4c922c3ab1b3eacc08669f4478942fb
-
SHA512
448bda21e0d8cbee2da1a7dc23f8fc8cc285fda56b72765b09c436813b9dd7327fe75646f95eb9af524c80d87148877c7b161507b4beb3035c26849f4291127d
-
SSDEEP
3072:Earut5rNswVerEJiP4NGzMhq3w52nEFSzQh+/Mtar4pmX0VCjARuv89KboZWHklS:1rut5rGwVerEJiP4NGzMhq3w52nEFSz5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b5a9b77a3468fbe9c4cf977c16f9c847a4c922c3ab1b3eacc08669f4478942fbN
Files
-
b5a9b77a3468fbe9c4cf977c16f9c847a4c922c3ab1b3eacc08669f4478942fbN.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 136KB - Virtual size: 132KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 872B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ