Static task
static1
Behavioral task
behavioral1
Sample
System_Update_Win10.64267e0e09a43.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
System_Update_Win10.64267e0e09a43.dll
Resource
win10v2004-20220901-en
General
-
Target
System_Update_Win10.67f799c09be21.zip
-
Size
43KB
-
MD5
80b29546c7fe266615ced6b694524371
-
SHA1
381ca097a82f6f4d0bc499ca6c0fe5411b2e61af
-
SHA256
838ff9687bd425185f43e90f21d6f652538126876fc37bb1ac1f738223910274
-
SHA512
3144c53a7be9b3788979794ae7224936a2eea6963c1beddbd309c06a50f45fca4276beb5a716569f324076cfa798a32d61939adda09d5ca67c2c6ec4aba89287
-
SSDEEP
768:oUKvBzC7Rb1SlM5+SJn8RZGpY3dXWL4yCU3c9fm8kVu6K745sxfTOC3DNMkfyIY:oUCO7R5SnBGpUd7XUs9u8cK7faaDNhY
Malware Config
Signatures
Files
-
System_Update_Win10.67f799c09be21.zip.zip
-
System_Update_Win10.64267e0e09a43.cpl.dll windows x64
Code Sign
Signer
Actual PE DigestDigest AlgorithmPE Digest MatchesfalseHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 60KB - Virtual size: 59KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.kdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ