Static task
static1
Behavioral task
behavioral1
Sample
System_Update_Win10.4a4793a31463b.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
System_Update_Win10.4a4793a31463b.dll
Resource
win10v2004-20220812-en
General
-
Target
System_Update_Win10.1e958551c7739.zip
-
Size
43KB
-
MD5
4a9c73ee485985f4efa2f5ba2b1e1e31
-
SHA1
3b58a713ca191afbdb3c7b32f33dcda8c2dc359a
-
SHA256
3f62866a6d2a6cc143db2780fc933f92994e080c81afc74e0ed97ec272474724
-
SHA512
48ed8dbe4a1ac9e15ef2469aacb5c4e44cb11bb0f06687556792a238d2cb090188a99a46c7d82ef43d68340bbbd924ef4f06a14c1ba3939962abf5772ba65b42
-
SSDEEP
768:Hjt/JRKmCKgs7Z8MSuIopJpGjTbw2qKDLAQ/BYaj6vbPsuj/bNL:jsm8s7Z8MS70JMjT+K3AQpiVjZL
Malware Config
Signatures
Files
-
System_Update_Win10.1e958551c7739.zip.zip
-
System_Update_Win10.4a4793a31463b.cpl.dll windows x64
Code Sign
Signer
Actual PE DigestDigest AlgorithmPE Digest MatchesfalseHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 62KB - Virtual size: 61KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.kdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ