Static task
static1
Behavioral task
behavioral1
Sample
c851f32d719fe6c02ddd96f98a050d20f7a02be6cdb980e0a178ff1e88d76672N.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
c851f32d719fe6c02ddd96f98a050d20f7a02be6cdb980e0a178ff1e88d76672N.dll
Resource
win10v2004-20240910-en
General
-
Target
c851f32d719fe6c02ddd96f98a050d20f7a02be6cdb980e0a178ff1e88d76672N
-
Size
83KB
-
MD5
f3fae41d3835adcedd1f9ed8d31dacd0
-
SHA1
bdd2e7402edd19359f82927f4550c40d9a4d95d5
-
SHA256
c851f32d719fe6c02ddd96f98a050d20f7a02be6cdb980e0a178ff1e88d76672
-
SHA512
87a155c0a2b1c43c47a9a10a076fd50bbfbbe5870893e3600f3dc3b5c013d07033d3c8c9fadb7f2473ee561c45b318850a94e12fedc1944a18460f0dbfe778d1
-
SSDEEP
1536:VIjtBbXINI7TWReiBNZ2yQQp1RVsWxhMrq6HDH2rD+PwPdTy0FcFNEzVnCeSi:qzbXIaTWfZ2yNp1RVsWWpD2v+P8y0wN+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c851f32d719fe6c02ddd96f98a050d20f7a02be6cdb980e0a178ff1e88d76672N
Files
-
c851f32d719fe6c02ddd96f98a050d20f7a02be6cdb980e0a178ff1e88d76672N.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
Size: 276KB - Virtual size: 944KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 52KB - Virtual size: 106KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 964KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
johsioob Size: 652KB - Virtual size: 652KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ppyilnqr Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ppyilnqr Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE