bazarloader | 1[.]dll

General

Target
1.dll
Size 184KB
Sample220217-zpb5vsfddk
SHA256 848e5054c591464e308b1ea14c1d3a10da8f056e77b929f626d375cfd0f657f9
MD5 b4d29178fbbc43f487bb83d4114eb418
SHA1 411f760a7a293edc73f1e65a80d5a2861305507a
SHA512 96638e3c19b88897eec4f668a1c4d8d1237b292b60c326a1baa5e709fb8b13e967c8030d3e2e2b79b6d72701783b04aab8067f248af8073a9fef5b052a9d7629
SSDEEP 3072:PezQJ/B1ULt7Yq0XjsJ9e4SFuvICDWEr1RsfhWFCm7+Gz:Pez6zUJ2sDe3MICDWQRsfkC2
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

Bazar/Team9 Loader payload 1 IoCs

resource	yara_rule
sample	BazarLoaderVar5

IMPHASH 27abfd9cfda7519d5efb3f08a2a4f3ce
SHA256 848e5054c591464e308b1ea14c1d3a10da8f056e77b929f626d375cfd0f657f9
MD5 b4d29178fbbc43f487bb83d4114eb418
SHA1 411f760a7a293edc73f1e65a80d5a2861305507a
SHA512 96638e3c19b88897eec4f668a1c4d8d1237b292b60c326a1baa5e709fb8b13e967c8030d3e2e2b79b6d72701783b04aab8067f248af8073a9fef5b052a9d7629
SSDEEP 3072:PezQJ/B1ULt7Yq0XjsJ9e4SFuvICDWEr1RsfhWFCm7+Gz:Pez6zUJ2sDe3MICDWQRsfkC2
MD5 SHA1 SHA512 SSDEEP

windows x64

Minor OS version

Major OS version

Entry point

75728

Magic Number

523

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths