Static task
static1
Behavioral task
behavioral1
Sample
65e8f4420a3a6943769a151eca2c3a8cf37896789567aa99d0ad8e39f6954708N.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
65e8f4420a3a6943769a151eca2c3a8cf37896789567aa99d0ad8e39f6954708N.dll
Resource
win10v2004-20240802-en
General
-
Target
65e8f4420a3a6943769a151eca2c3a8cf37896789567aa99d0ad8e39f6954708N
-
Size
524KB
-
MD5
0b7bbbe398345da5a80ba89e1339dec0
-
SHA1
08284ad942d2dde6f0758561f64e39f45e1aceb6
-
SHA256
65e8f4420a3a6943769a151eca2c3a8cf37896789567aa99d0ad8e39f6954708
-
SHA512
b105a88e9eb4fa26ca794112d8aba71e098bb87015e202c321e396ae9a6f83f6a7f28f2aae0d931298705b2cfa1db0e192b4fb1e6ea5d7b661037657cf814df2
-
SSDEEP
768:8hX2W17avI3JiFU1atVwwkpJ7TTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTS:8NcA3JiFU1mlkpJu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 65e8f4420a3a6943769a151eca2c3a8cf37896789567aa99d0ad8e39f6954708N
Files
-
65e8f4420a3a6943769a151eca2c3a8cf37896789567aa99d0ad8e39f6954708N.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 512B - Virtual size: 192B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 19KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ