Static task
static1
Behavioral task
behavioral1
Sample
deimos4.dll
Resource
win7-20220310-en
Behavioral task
behavioral2
Sample
deimos4.dll
Resource
win10v2004-en-20220113
General
-
Target
deimos4.dll
-
Size
140KB
-
MD5
810e12bed5a8ebad37cc58ebad38c98d
-
SHA1
b0535cb1c39548d2605f3ce913905cb0e49f931c
-
SHA256
a5aae18b76d196ba1c4904f557f6e3bae5574bd740150b2978e80de4cbc75417
-
SHA512
884913a33185d8f055d9b9cd630cdf65e08556acb8e4e3c5bd5bcf76369821f70724c2a92baa4cc763024753c1ff84ed28af328c3eacd4c539e134913b23cdd6
Malware Config
Extracted
jupyter
http://146.70.53.153
Signatures
-
Jupyter family
Files
-
deimos4.dll.dll windows x86
dae02f32a21e03ce65412f6e56942daa
Code Sign
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorDllMain
Sections
.text Size: 138KB - Virtual size: 138KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 672B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ