Static task
static1
Behavioral task
behavioral1
Sample
b804e3e7b467d67949f3932d2c37ec3f4d8be767b3bec5f6791cea0660ca5455N.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
b804e3e7b467d67949f3932d2c37ec3f4d8be767b3bec5f6791cea0660ca5455N.dll
Resource
win10v2004-20240802-en
General
-
Target
b804e3e7b467d67949f3932d2c37ec3f4d8be767b3bec5f6791cea0660ca5455N
-
Size
37KB
-
MD5
fa16d2c2b763816d0fb2618adec55af0
-
SHA1
8efd58e2593a0b683a89288b1e0baad5aade0e04
-
SHA256
b804e3e7b467d67949f3932d2c37ec3f4d8be767b3bec5f6791cea0660ca5455
-
SHA512
c8763796d4393340a1d5a85de069c3b2f44afaf7e1a1834bda2dbb5da0bfa1d32a310592ec65e09d628ab1ce659ab2656ef5960de7b566d0109ebf63088fedb7
-
SSDEEP
768:LhradP1OSInWNHEsCaTHwQR2kI1FGL21CXQMz6:FWh1OSInW31EFW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b804e3e7b467d67949f3932d2c37ec3f4d8be767b3bec5f6791cea0660ca5455N
Files
-
b804e3e7b467d67949f3932d2c37ec3f4d8be767b3bec5f6791cea0660ca5455N.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 110KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ