Static task
static1
Behavioral task
behavioral1
Sample
ValueFactory_Goo_2_Editor.dll
Resource
win7-20240903-en
General
-
Target
ValueFactory_Goo_2_Editor.dll
-
Size
749KB
-
MD5
f8717833db303c61cbbca7d2cd97e002
-
SHA1
bdabdff86094b80395ebacf26040078fe2c1fc72
-
SHA256
4ebb986e266f724b72cb733991bdb9d086d45d40d5a5f142e28b3da354e038e4
-
SHA512
58b04da0c9b28bb8d188977a562ad9c24b64e0c854dff2aa135b8c1459548ad54b9284b307ca91a50f5540c05309d3ba8248aaa773e46f7b73e053c2804929ba
-
SSDEEP
6144:nqcPk04Y6O8TlC5JMp5W+zYdvovVRV0v/F790hqJz1lFKo7901uZo7GRhWFf4N+i:nqIklYJlHcWJ9F790kzTFKo7906M
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ValueFactory_Goo_2_Editor.dll
Files
-
ValueFactory_Goo_2_Editor.dll.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 747KB - Virtual size: 747KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 740B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ