Static task
static1
Behavioral task
behavioral1
Sample
161070198d1a35688aa5c1dbdd5f3211ebf3fb97953264c8534a7ae489c81b4d.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
161070198d1a35688aa5c1dbdd5f3211ebf3fb97953264c8534a7ae489c81b4d.dll
Resource
win10v2004-20241007-en
General
-
Target
161070198d1a35688aa5c1dbdd5f3211ebf3fb97953264c8534a7ae489c81b4d
-
Size
12KB
-
MD5
643265114c4cd3e79d2b8934b899059d
-
SHA1
44d20ef5e199ce34b20f731f5301203831bffdc5
-
SHA256
161070198d1a35688aa5c1dbdd5f3211ebf3fb97953264c8534a7ae489c81b4d
-
SHA512
6821a7635b53e80ca1c0ac9acb63c383750dc6a4b853536bd3c5454e2b2e31621568dcd25caea78e00da8cde8ec977469de64dbc6357bbbca25fdae3062de8e0
-
SSDEEP
192:pwllroCUNbhUHvVIIwqunQ39U/j3dXNa0jhkkECX/OtXViOiou/:elSbKHvK9TnC9U7vhMCXuM/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 161070198d1a35688aa5c1dbdd5f3211ebf3fb97953264c8534a7ae489c81b4d
Files
-
161070198d1a35688aa5c1dbdd5f3211ebf3fb97953264c8534a7ae489c81b4d.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 680B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ