Static task
static1
Behavioral task
behavioral1
Sample
803582b68d2471c236c63308a412dbc428ae65d0cd60b6e6ad863a7eacc4637dN.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
803582b68d2471c236c63308a412dbc428ae65d0cd60b6e6ad863a7eacc4637dN.dll
Resource
win10v2004-20241007-en
General
-
Target
803582b68d2471c236c63308a412dbc428ae65d0cd60b6e6ad863a7eacc4637dN
-
Size
736KB
-
MD5
5c202aea09cb481c1799aab23f42cf30
-
SHA1
afee46cc1129df2abf6dc7cf55b817d0411e605f
-
SHA256
803582b68d2471c236c63308a412dbc428ae65d0cd60b6e6ad863a7eacc4637d
-
SHA512
8035803137a95567802c95d1b4d2bfa6dabfdcf0e3224303fafde1f547dc7b8cbcde8494aa1349de1ac13c9fbc48bae7276b1724cc35c6e7c8d26fdd820545a7
-
SSDEEP
12288:dYznIBvoXoKnFN/LbfbXnBUz0UBePW1XFvNTLmB70+Nqk9dNw++3LeaZD:CIEnF9XnBUz0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 803582b68d2471c236c63308a412dbc428ae65d0cd60b6e6ad863a7eacc4637dN
Files
-
803582b68d2471c236c63308a412dbc428ae65d0cd60b6e6ad863a7eacc4637dN.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 733KB - Virtual size: 733KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ