Entry
Static task
static1
Behavioral task
behavioral1
Sample
1970d38e7fa45a46e792372a19d890541c87d1007ddedd53858b6df6728d72ff.dll
Resource
win7-20240903-en
General
-
Target
1970d38e7fa45a46e792372a19d890541c87d1007ddedd53858b6df6728d72ff.exe
-
Size
278KB
-
MD5
f50df05ae6238189b43ce1b1101f67c6
-
SHA1
eee86d826e9ee48ab5dd0c0965277d0868b9df89
-
SHA256
1970d38e7fa45a46e792372a19d890541c87d1007ddedd53858b6df6728d72ff
-
SHA512
817d64e87d12cf76497f5ee482707db24ac0fbe131598636992f7ec0efb240bd3c59079fc9366eae4e03f4e1ce39990b05945e54d580ae9ba1b0f79223d0681f
-
SSDEEP
6144:DMgNhY/LbOxL5HmXQ3w8rr984zwpzNjC7uJ4/VhTU:DtNQIL5Hmg3b6Ewz6U
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 1970d38e7fa45a46e792372a19d890541c87d1007ddedd53858b6df6728d72ff.exe
Files
-
1970d38e7fa45a46e792372a19d890541c87d1007ddedd53858b6df6728d72ff.exe.dll windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Exports
Exports
Sections
.text Size: 158KB - Virtual size: 157KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 172B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 117KB - Virtual size: 117KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 512B - Virtual size: 48B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 424B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ