Entry
Static task
static1
Behavioral task
behavioral1
Sample
d4d49d605c25ef3f1a41c6fd24a87f22bc74177891c300399b073d5a7d219003N.dll
Resource
win7-20240708-en
General
-
Target
d4d49d605c25ef3f1a41c6fd24a87f22bc74177891c300399b073d5a7d219003N
-
Size
423KB
-
MD5
640794086caf5d647fa17e0cb1492cd0
-
SHA1
b166eb89f19778558016262f9348379b40e6b1d2
-
SHA256
d4d49d605c25ef3f1a41c6fd24a87f22bc74177891c300399b073d5a7d219003
-
SHA512
6bd070247fbd0f72dd0a45f9191d118f773f244a96c86dd1ee14fe74ee9437ac10c8d6f2a18dc32d3478a596afa3ac1d7706ac3994edea22844fd6333137d215
-
SSDEEP
6144:dWavrT/CCbmISBh9bFVudzWAcIPiqqrPdpL0TdVq9D1RR/vB6Ch3azhqYDJQChzX:ZTJmf5uxfY2o1RbD5bYDKChzMflU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource d4d49d605c25ef3f1a41c6fd24a87f22bc74177891c300399b073d5a7d219003N
Files
-
d4d49d605c25ef3f1a41c6fd24a87f22bc74177891c300399b073d5a7d219003N.dll windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Exports
Exports
Sections
.text Size: 303KB - Virtual size: 303KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 216B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 117KB - Virtual size: 117KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 512B - Virtual size: 72B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 424B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ