eIxo
Static task
static1
Behavioral task
behavioral1
Sample
SecuriteInfo.com.Variant.Jaik.147829.19746.7308.dll
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
SecuriteInfo.com.Variant.Jaik.147829.19746.7308.dll
Resource
win10v2004-20230220-en
General
-
Target
SecuriteInfo.com.Variant.Jaik.147829.19746.7308.dll
-
Size
5KB
-
MD5
c623e0d51dd198211865acfb32735300
-
SHA1
80b0cb9258b410c22cffc1ec92c32ef48a218b5e
-
SHA256
cfacdbf069973361203b31e06bfedc579f38d80726334ad8a58422778306492b
-
SHA512
9681bb3ca7d3e8ed2cbb1aac5e651eb226d922bb9b75fad0d6e4e27076943d70647d467fecd2af5cf4f986d11c74c67d6908be9995cb870a5a2e1b8668e071c8
-
SSDEEP
48:S8buR4r6tMBdqTBCDq92hd25RwChgq/d0TMd9Ml0N/a7iaC5y:xrhbqCifwChJV0AdsyOLC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource SecuriteInfo.com.Variant.Jaik.147829.19746.7308.dll
Files
-
SecuriteInfo.com.Variant.Jaik.147829.19746.7308.dll.dll windows x86
a0d5b428b33f7207bfa971a45d796fa6
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
EnumResourceTypesA
GetProcAddress
VirtualAlloc
loadperf
UnloadPerfCounterTextStringsA
LoadPerfCounterTextStringsA
UnloadPerfCounterTextStringsW
wsnmp32
ord904
ord104
ord999
ord201
ord202
ord203
ord900
oleaut32
VarR8FromCy
OleCreateFontIndirect
VarDecFromR4
mswsock
EnumProtocolsW
rexec
WSARecvEx
getnetbyname
pdh
PdhExpandCounterPathW
PdhGetLogFileSize
PdhEnumObjectsA
PdhAddCounterW
PdhGetCounterInfoA
PdhGetFormattedCounterArrayW
PdhParseInstanceNameW
gdi32
GetDIBColorTable
ColorMatchToTarget
SetPolyFillMode
RemoveFontResourceExA
crypt32
CertVerifyCRLTimeValidity
CryptDecodeMessage
CertIsRDNAttrsInCertificateName
mapi32
ord60
ord180
ord136
ord12
ord241
ord49
mpr
WNetGetUniversalNameW
WNetGetConnectionA
WNetCancelConnectionA
WNetDisconnectDialog
WNetGetProviderNameA
Exports
Exports
Sections
.text Size: 1024B - Virtual size: 598B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 136B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 124B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ